Details
-
Sub-task
-
Status: Open
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
-
None
Description
As described in the ASF Security Wiki, we should add a page documenting the assumptions and guarantees Ozone makes in regards to security. This will help admins and people who report suspected vulnerabilities. A good example is given in the doc:
Are logs intended to be safe to expose to users with read-only authorization, or may they contain credentials?