On Wed, Feb 3, 2010 at 12:09 PM, Joe Orton <[email protected]> wrote:
> I considered logging a warning for each client which renegotiates > insecurely (whether due to lack of support on client or server), but, > that's likely to be very noisy. Any way to note the insecure renegotiation and save it long enough to be associated with a r->notes or subprocess_env? That would let you log it with IP and user-agent in access log (and help you convince yourself it might be safe to turn on strict renegotiation based on log analysis) -- Eric Covener [email protected]
