Return-Path: X-Original-To: apmail-hc-httpclient-users-archive@www.apache.org Delivered-To: apmail-hc-httpclient-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 2770611B78 for ; Mon, 5 May 2014 21:43:36 +0000 (UTC) Received: (qmail 43026 invoked by uid 500); 5 May 2014 21:43:34 -0000 Delivered-To: apmail-hc-httpclient-users-archive@hc.apache.org Received: (qmail 42968 invoked by uid 500); 5 May 2014 21:43:34 -0000 Mailing-List: contact httpclient-users-help@hc.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "HttpClient User Discussion" Delivered-To: mailing list httpclient-users@hc.apache.org Received: (qmail 42960 invoked by uid 99); 5 May 2014 21:43:34 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 05 May 2014 21:43:34 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of multibobwork@gmail.com designates 209.85.216.175 as permitted sender) Received: from [209.85.216.175] (HELO mail-qc0-f175.google.com) (209.85.216.175) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 05 May 2014 21:43:27 +0000 Received: by mail-qc0-f175.google.com with SMTP id w7so6868732qcr.6 for ; Mon, 05 May 2014 14:43:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:references:from:content-type:in-reply-to:message-id:date:to :content-transfer-encoding:mime-version; bh=olOKfhc8LcPcVSa/STkxYkKZyOdkgeKF5yyrMjrDPq8=; b=pLTSFSOd0uQhElRX1F9TDU3qTcgVvtC9CTIuhpPqcE/NpjqiVY6z0/FFgm8lW3Y2G7 9FFWsPCR42t52wFMm7msV4RFATuVmzyDoelSznGNUsmytAmRr9FFvc5jxhJXJ3YPWtKH JMD5eH007xdopJ0RW4WM3+mXT4MlEiOgfNdN/ViyO9UnqNPW29XLFs0Y310o8vCLKSQR /6hBChxwBPypftS8f9cDd8tSmYUrEMzPZvYoM0Ke1/lv0J2234r0N8H2imJNHwh2IdYd VjuMO+bR9JbN5qxAbVn0pxGsrwTcPFMeZMODB/kOYvupQps+pb33i/UtTyh5IYRBOesX IM1w== X-Received: by 10.140.90.84 with SMTP id w78mr46054034qgd.52.1399326187317; Mon, 05 May 2014 14:43:07 -0700 (PDT) Received: from [10.162.137.201] (65.sub-70-192-15.myvzw.com. [70.192.15.65]) by mx.google.com with ESMTPSA id r14sm9622574qay.36.2014.05.05.14.43.05 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 05 May 2014 14:43:05 -0700 (PDT) Subject: Password exposure in logs References: <916128D3B0588049941092CE31D137D52C36819E@UHN-PE-MBX-102P.uhn.ca> <1389888893.11675.12.camel@ubuntu> <916128D3B0588049941092CE31D137D52C369224@UHN-PE-MBX-102P.uhn.ca> <07bc1a62-2f12-483b-be1c-7e130026c89a@email.android.com> <916128D3B0588049941092CE31D137D52C369324@UHN-PE-MBX-102P.uhn.ca> <916128D3B0588049941092CE31D137D52C3693BD@UHN-PE-MBX-102P.uhn.ca> <1389977793.26576.5.camel@ubuntu> <916128D3B0588049941092CE31D137D52C369487@UHN-PE-MBX-102P.uhn.ca> <916128D3B0588049941092CE31D137D52C398BC4@UHN-PE-MBX-102P.uhn.ca> From: Bob Anderson Content-Type: text/plain; charset=us-ascii X-Mailer: iPad Mail (11D201) In-Reply-To: <916128D3B0588049941092CE31D137D52C398BC4@UHN-PE-MBX-102P.uhn.ca> Message-Id: <55C39A12-F221-4F63-9E47-BE61BF3A9480@gmail.com> Date: Mon, 5 May 2014 17:43:02 -0400 To: HttpClient User Discussion Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (1.0) X-Virus-Checked: Checked by ClamAV on apache.org Hi, I know that the password is exposed in clear text on some versions of the h= ttp client in debug. Can you tell me what versions? Also it appears this al= so happens on some errors. Can you send an info on this. Any areas where p= assword are exposed in the clear I need information on. Thanks, Bob= --------------------------------------------------------------------- To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org For additional commands, e-mail: httpclient-users-help@hc.apache.org