open-telemetry / sig-security

Apache License 2.0
7 stars 9 forks source link

Add recommendation around binding to network interfaces #19

Closed codeboten closed 11 months ago

codeboten commented 12 months ago

A discussion from the September 27th SIG meeting concluded that the recommendation from the security SIG should be to always bind to localhost rather than to 0.0.0.0 or any interface.

EjiroLaurelD commented 12 months ago

Hello @codeboten, may I work on this please?

jpkrohling commented 12 months ago

It's yours, @EjiroLaurelD

codeboten commented 12 months ago

Thanks @EjiroLaurelD!

EjiroLaurelD commented 12 months ago

Thank you

codeboten commented 11 months ago

The recommendation is now documented here: https://github.com/open-telemetry/sig-security/blob/main/docs/recommendations.md#binding-to-network-interfaces, closing the issue.