On Tue, May 19, 2020, 13:46 Joachim Lindenberg <joac...@lindenberg.one> wrote:
> Is logging really a concern if you use https and avoid any proxy that > terminates (MitM)? Of course you can argue about the nginx or similar you > put in front of Guacamole, but if both components are administrated by the > same folks you know whom to trust or fire anyway.. > Indeed, it's not that significant a concern, just valid one. It is generally accepted as a bad practice. If possible to avoid, we should do so. I created an issue for this in JIRA a few months ago, and have been doing some occasional work in that regard: https://issues.apache.org/jira/browse/GUACAMOLE-956 - Mike
