Lower <sts:duration> to 5m to prevent misconfigs denying access.

[user/henk/code/inspircd.git] / src / modules / m_ircv3_sts.cpp

diff --git a/src/modules/m_ircv3_sts.cpp b/src/modules/m_ircv3_sts.cpp
index 86ea159c185a92c0f206cdf961245e2db3a6aa51..4d2839062ee0d6836601b531ab91509eeb36a05e 100644 (file)
--- a/src/modules/m_ircv3_sts.cpp
+++ b/src/modules/m_ircv3_sts.cpp
@@ -171,7 +171,7 @@ class ModuleIRCv3STS : public Module
                if (!HasValidSSLPort(port))
                        throw ModuleException("<sts:port> must be a TLS port, at " + tag->getTagLocation());
 
-               unsigned long duration = tag->getDuration("duration", 60*60*24*30*2);
+               unsigned long duration = tag->getDuration("duration", 5*60, 60);
                bool preload = tag->getBool("preload");
                cap.SetPolicy(host, duration, port, preload);