Преглед на файлове

turnserver.conf: add --prod section to enhance security

Alessandro Polidori преди 5 години
родител
ревизия
3f3a3623c8
променени са 2 файла, в които са добавени 18 реда и са изтрити 0 реда
  1. 9 0
      docker/coturn/turnserver.conf
  2. 9 0
      examples/etc/turnserver.conf

+ 9 - 0
docker/coturn/turnserver.conf

@@ -575,6 +575,15 @@ syslog
 #
 #stun-only
 
+# Option to hide software version. Enhance security when used in production.
+# Revealing the specific software version of the agent through the
+# SOFTWARE attribute might allow them to become more vulnerable to
+# attacks against software that is known to contain security holes.
+# Implementers SHOULD make usage of the SOFTWARE attribute a
+# configurable option (https://tools.ietf.org/html/rfc5389#section-16.1.2)
+#
+#prod
+
 # Option to suppress STUN functionality, only TURN requests will be processed.
 # Run as TURN server only, all STUN requests will be ignored.
 # By default, this option is NOT set.

+ 9 - 0
examples/etc/turnserver.conf

@@ -559,6 +559,15 @@
 #
 #stun-only
 
+# Option to hide software version. Enhance security when used in production.
+# Revealing the specific software version of the agent through the
+# SOFTWARE attribute might allow them to become more vulnerable to
+# attacks against software that is known to contain security holes.
+# Implementers SHOULD make usage of the SOFTWARE attribute a
+# configurable option (https://tools.ietf.org/html/rfc5389#section-16.1.2)
+#
+#prod
+
 # Option to suppress STUN functionality, only TURN requests will be processed.
 # Run as TURN server only, all STUN requests will be ignored.
 # By default, this option is NOT set.