Mailing-List: contact docs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: docs@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of rainer.jung@kippdata.de
 designates 195.227.30.149 as permitted sender)
Message-ID: <4FBC0441.5080909@kippdata.de>
Date: Tue, 22 May 2012 23:25:21 +0200
From: Rainer Jung <rainer.jung@kippdata.de>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:12.0) Gecko/20120428 Thunderbird/12.0.1
MIME-Version: 1.0
To: dev@httpd.apache.org, docs@httpd.apache.org
Subject: Re: Comment system, take two
References: <4FBAADDA.1030100@cord.dk>
In-Reply-To: <4FBAADDA.1030100@cord.dk>
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 7bit

=== Sorry, sent again, because I forgot the docs list ===

On 21.05.2012 23:04, Daniel Gruno wrote:
> In light of recent concerns about the Disqus system, I've taken it upon
> myself to figure out an alternative we can use for adding comments to
> our pages. And so, through the better half of a day, I worked on
> creating a new system that is without any evil tracking mechanisms of
> any sort except for what people themselves will allow - that is, only
> information that is willingly entered will be stored, no IPs or such.

Great!

> The result (thus far) can be seen at a small test page I made for the
> http project at http://c.apaste.info/httpd.html - feel free to give it a
> test spin and see what you like.

I like it.

+1

Concerning production readyness, some points come to mind:

- Did you pay attention on escaping problematic input? I saw some 
escaping, but didn't thoroughly test it. We don't want XSS and such.

- Is there some safety against brute force password hacking for the 
registered people, especially the moderators? E.g. locking accounts 
after a few wrong passwords.

- Since we want to host it later inside ASF infra: what are the infra 
requirements? It seems the server part is written in Lua? Is it based on 
httpd 2.4 with mod_lua, or just Lua in CGI scripts or similar?

Thanks!

Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org