Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.
Sign upConsider brute-force protection on the Server-to-Server Sharing Endpoint #478
Comments
LukasReschke
added
enhancement
feature: sharing
security
labels
Jul 20, 2016
MorrisJobke
referenced this issue
May 22, 2017
Merged
[stable12] Update Opcache recommendation #5015
nextcloud-bot
added
the
stale
label
Jun 20, 2018
nextcloud-bot
referenced this issue
Nov 7, 2018
Closed
Brute force whitelist is not applied to CardDAV ? #12330
nextcloud-bot
referenced this issue
Nov 29, 2018
Open
Basic Auth from other website on same domain triggers brute force protection #12720
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
LukasReschke commentedJul 20, 2016
•
edited by rullzer
This is a little bit a trickier one, having brute-force protection there as well would be nice. However, the way S2S is implemented right now may lead to people locking out servers by intention.
Needs some more thoughts as well as status messages so that the other Nextcloud partiall throttles. Related to #437