diff --git a/Hardening-Guide.md b/Hardening-Guide.md index 63e24bc..365e681 100644 --- a/Hardening-Guide.md +++ b/Hardening-Guide.md @@ -41,7 +41,7 @@ Example GET request: If your reverse proxy is configured to save access logs, or the access logs are shipped to an external service such as Prometheus + Promtail, it is recommended to redact the value of the `access_token` parameter on the external log store, or directly on your reverse proxy of choice, if supported. -No other data is ever send via GET request, encrypted or unencrypted. +No other data is ever sent via GET request, encrypted or unencrypted. Be advised that internal vaultwarden logging strips query to 30 chars, hence access_token is truncated, meaning if not using reverse proxy, you shall be safe from this by default.