Project

General

Profile

Task #7378

Updated by Nico Schottelius almost 5 years ago

h2. draft 1: "https only" 1 

 * Block everything incoming besides https 
 * Reasoning: 
 ** containers by default insecure 
 ** if https open -> it is likely intended 
 * container types (brainstorming) 
 ** databases 
 ** message broker 
 ** workers (probably not even reachable) 
 ** a lot of http only stuff 

 h2. draft 2: tls/ssl in a container 

 * get a name 
 * get a cert 
 * TBD

Back