top | item 38520221

(no title)

gazby | 2 years ago

I'm talking literally just access logging though. Expecting even an individual, let alone a business, to run a publicly accessible web service without any form of access logging is just absurd IMO.

I'd expect privacy-inclined people to care vastly more about detecting and tracing indicators of compromise or similar over avoiding access logging on the open internet.

Edit: Use actual English.

discuss

order

em-bee|2 years ago

i agree with you, but knowledge and understanding of these issues varies a lot. my confusion was your apparent conclusion that in a community run project this would have been better.

gazby|2 years ago

I would indeed expect a community-run project to have been better (at evaluating the trade-offs of access logging [which occurs on every other web property F-Droid users utilize]). If only because there would have been more than one voice that mattered, and thus consensus would be required rather than unilateral dictation.

Is the confusion a result of disagreement, or of my explaining my perspective poorly?