Re: listening all local addresses by default is not security best practice

To whom it may concern, On 11/23/22 14:31, tommydu1...@outlook.com wrote: Hi there, Product: > > [snip] The default behaviour of http connector is listenning all interfaces. False. It is found in the description of "address" in attrib

Re: [Tomcat9][Linux]listening all local addresses by default is not security best practice

Shawn, On 11/23/22 16:19, Shawn Heisey wrote: On 11/23/22 12:43, Robert Turner wrote: My 2 cents: I think that it would be a very strange change to make to a generic product and a "sample" configuration file. If Tomcat was packaged in a distribution, that might be a more reasonable suggestio