3 ms·
It is a good security policy in general to not disclose reasons for denials, because doing so gives attackers a hint as to what they need to target. (But yes,
by kube-system 3y ago
It is a good security policy in general to not disclose reasons for denials, because doing so gives attackers a hint as to what they need to target. (But yes, it is better customer service to disclose.)
- deleted 3y ago[deleted]
- cjbgkagh 3y agoBut it also frustrates legitimate users. I think we should balance the extra security needed to prevent attacks versus creating a kafkaesque nightmare for ourselves.