https://bugs.exim.org/show_bug.cgi?id=1666
--- Comment #3 from Graeme Fowler <graeme@???> ---
Ooh, go me, missing the point completely.
For my own edification: This is whilst we're not in debug mode.
Now, thinking about it more clearly: if we did have a way to hide
lookups/expansions in the logs, might that not give us more problems when
trying to isolate problems? I'd argue here that in the majority of cases the
admin who looks at the logs in which this information is placed is also the
admin of the server, so can trap/catch/log credentials in a rather large number
of ways additional to having them put in the logs.
Instead of having a global 'hide' for all lookups, perhaps we could have an
expansion operator in which to wrap them or a modifier such as 'lookup_hide'
which then makes a suitable modification to the log entry?
It's a tricky one.
--
You are receiving this mail because:
You are on the CC list for the bug.
