| ▲ | inkyoto 3 hours ago | |
> I have seen pushback on this kind of behavior because "users don't like error codes" or other such nonsense […] There are two dimensions to it: UX and security. Displaying excessive technical information on an end-user interface will complicate support and likely reveal too much about the internal system design, making it vulnerable to external attacks. The latter is particularly concerning for any design facing the public internet. A frequently recommended approach is exception shielding. It involves logging two messages upon encountering a problem: a nondescript user-facing message (potentially including a reference ID pinpointing the problem in space and time) and a detailed internal message with the problem’s details and context for L3 support / engineering. | ||