Skip to content

Commit

Permalink
Update protocol.html
Browse files Browse the repository at this point in the history
Co-authored-by: Ted Thibodeau Jr <tthibodeau@openlinksw.com>
  • Loading branch information
csarven and TallTed committed Apr 6, 2021
1 parent 4414930 commit c10cc72
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion protocol.html
Original file line number Diff line number Diff line change
Expand Up @@ -909,7 +909,7 @@ <h3 property="schema:name">Security Considerations</h3>

<p>Data pods SHOULD use TLS connections to protect the contents of requests and responses from eavesdropping and modification by third parties. Unsecured TCP connections without TLS MAY be used in testing environments or when the data pod is behind a reverse proxy that terminates a secure connection.</p>

<p>Servers MUST NOT expose information more than the minimum amount necessary to power a feature. For example, when a <code>GET</code> method request targets a container, the server MUST NOT include information beyond containment statements about the contained resources in the response. Last modification time, size, type, creator or label are examples of what is not allowed without proper authorization.</p>
<p>Servers MUST NOT expose information beyond the minimum amount necessary to enable a feature. For example, when a <code>GET</code> method request targets a container, the server MUST NOT include information beyond containment statements about the contained resources in the response. Examples of what is not allowed without proper authorization include size, type, creator, label, and last modification time.</p>
</div>
</section>

Expand Down

0 comments on commit c10cc72

Please sign in to comment.