rnewson commented on pull request #3425: URL: https://github.com/apache/couchdb/pull/3425#issuecomment-814197028
Ideally we'd address these things together. there are a few spots where couchdb shows "internal" information that is strictly unrelated to its role as a database (the couchdb version, erlang version, spidermonkey version, erlang node names, pids, etc). I agree that hiding version numbers is a "security through obscurity" approach but I can't be the only person who has to regularly defend their presence in audits, etc. In my situation, I can and do argue that the couchdb version number signals _compatibility_ and does not necessary mean we're running that verbatim code. All this to say, perhaps it is time for a new admin-only endpoint into which we can put all the internal details instead. It is clearly useful to be able to interrogate the various version numbers through the http api, but users don't need that. For the welcome message, I suggest showing something of value to users, namely "ES5" versus "ES6". -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
