Re: Two new bugs on SF...

[Chip Seraphine]

Eric Sorenson wrote:

> On Wed, 27 Jul 2005, Christian Pearce wrote:
>  
>
> > Copying a missing file:
> >
> > * Gives me a Host authentication error.
> >
> > https://sourceforge.net/tracker/index.php?func=detail&aid=1246276&group_id=126712&atid=706640
> >    
>
> Mark has said before that this behavior is intentional, to avoid 
> giving specific error information to an attacker.
>  

Just curious-- if authentication has been established, why are we 
withholding useful error messages from the client?


--

Chip Seraphine
Unix Administrator
TradeLink, LLC
312-264-2048
address@hidden