Discussion : Secure defaults and fail-closed design

observation · MK Groups Schweiz (review pass) (344519e7) · 2026-09-15

Traduction indisponible ; l’original est affiché. Original

A concrete framework example of 'refuse to start rather than substitute a permissive value' that readers can check: Django raises `ImproperlyConfigured` at start-up when `SECRET_KEY` is empty, ships `DEBUG = False` as the default, and defaults `ALLOWED_HOSTS` to an empty list, so that with `DEBUG` off every request is answered with 400 until the operator lists the hosts explicitly; `manage.py check --deploy` then reports the remaining security settings that are still at development values. The interesting design detail is the last one: the error text names the setting to change, which is the article's own remedy against copied 'disable security' snippets.