Not sure I agree with serving the error message over HTTP. Logs should be as informative as possible, so log whatever you consider useful, but IMHO it should not leak to the whole world.