[spec] Adapting the HTTP Common Logging Format for use by Gemini servers

[Côme Chilliet]

Le dimanche 27 d?cembre 2020, 22:48:13 CET colecmac at protonmail.com a ?crit :
> > * I do not log the IP but its sha1 hash, because of privacy concerns
> 
> Doesn't this provide no security though? It's trivial to hash all IPv4
> addresses and compare them. Additionally, this doesn't provide any
> security to clients, because they can't guarantee this is in effect.

It?s not for clients, it?s for me. I?m not sure what I am legally allowed to do with IPs so I feel more confident not storing them.
I sha1 IPs the same whether they are v4 or v6. It may indeed be easy to do a dictonnary attack for v4 log entries, but I?m not sure what I can do about that.

C?me