4 ms·
Then store it for that purpose, don't use it for anything else, and delete it when it's not useful anymore (realistically, for these purposes, after a few minut
by yau8edq12i 3y ago
Then store it for that purpose, don't use it for anything else, and delete it when it's not useful anymore (realistically, for these purposes, after a few minutes to an hour?).
- tekknik 3y agoOk so now a criminal just needs to avoid being detected for an hour and the logs are self wiping. Sounds like a feature they’ll love!
- IanCal 3y agoKeep them as long as is reasonable, then delete them.
- tekknik 3y agoReasonable means different things in different countries and industries. Some require 14 years of retention.
- IanCal 3y agoAbsolutely, and gdpr doesn't get in the way of those legal obligations. The point is that you can do what is necessary or expected to provide the service without consent, and you can do much more with consent.
- yau8edq12i 3y agoI thought this was about DDOS and spam protection. If you want to move the goalposts, state that explicitly.
- tekknik 3y agoHow is that misaligned with your DDOS? It’s not moving the goal posts at all you just didnt think of that possibility and now are upset.
- thomastjeffery 3y agoHow can you DDOS if you can only connect once per hour?