💾 Archived View for rawtext.club › ~sloum › geminilist › 000562.gmi captured on 2020-09-24 at 02:29:06. Gemini links have been rewritten to link to archived content

View Raw

More Information

-=-=-=-=-=-=-

<-- back to the mailing list

An observation about client certificates

Dave Huseby dwh at vi.rs

Tue May 12 02:37:18 BST 2020

- - - - - - - - - - - - - - - - - - - ```

On Mon, May 11, 2020, at 2:21 AM, Sean Conner wrote:
> 
> We should talk about logging formats some time.  Molly Brown keeps logs
> 
> too (I keep meaning to make a nice graph showing the wave of traffice
> 
> that came in after we hit HN), in an ad-hoc format that doesn't match
> 
> yours below at all (unsurprisingly).  Having a standard format would
> 
> facilitate tools to monitor/visualise logs.
> 
>   I log via syslog(), which handles the timestamps for me (and log rotation,
> and a whole bunch of other stuff related to logging).  I place the name of
> the fields to make later processing a bit easier, but as far as I can tell,
> the only thing I log that you don't is the issuer and subject from any
> certificates presented, and that was to satisfy my own curiousity (and to
> potentially troubleshoot any issues).

I think by default, any logging we do should be at a bare minimum and not contain the IP address of the client or any other data that would link the log line to them. I added logging to my hacked up version of Pollux but it only logs which page was loaded and when. My purpose was to track basic traffic and any errors that occur and nothing else.

Dave