Update security-warnings.md about REST interface

2016-09-01 11:12:48 -07:00 · 2016-09-01 11:12:48 -07:00 · 8962f2a902
parent 8a620d507f
commit 8962f2a902
1 changed files with 7 additions and 0 deletions
--- a/doc/security-warnings.md
+++ b/doc/security-warnings.md
@ -37,3 +37,10 @@ be able to:
 You should ensure no other users have the ability to execute code (even
 unprivileged) on the hardware your `zcashd` process runs on until these
 vulnerabilities are fully analyzed and fixed.
+
+REST Interface
+--------------
+
+The REST interface is a feature inherited from upstream Bitcoin.  By default,
+it is disabled. We do not recommend you enable it until it has undergone a
+security review.