added explanation about stripping of logging.

2024-08-02 22:38:59 +00:00 · 2024-08-02 22:38:59 +00:00 · 0143c7b812
parent 089af00c68
commit 0143c7b812
1 changed files with 2 additions and 0 deletions
--- a/Hardening-Guide.md
+++ b/Hardening-Guide.md
@ -43,6 +43,8 @@ If your reverse proxy is configured to save access logs, or the access logs are

 No other data is ever send via GET request, encrypted or unencrypted.

+Be advised that internal vaultwarden logging strips query to 30 chars, hence access_token is truncated, meaning if not using reverse proxy, you shall be safe from this by default. 
+
 # Docker configuration

 The subsections below cover hardening related to Docker.