You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We must provide secure means for clients to interact with DKV GRPC endpoints. Specifically, this issue asks for encrypted communication between both client-server as well as server-server interactions. A separate issue will handle servers and possible clients authentication #109 .
We propose to use TLS 1.2 for encrypting both client-server and server-server interactions regardless of the application protocol (GRPC/HTTP). Additionally, we must provide means (via command line flag) for the user to disable security so as to simplify onboarding to DKV during development. Unless the users specify such an override, all the following interactions must be encrypted by default.
Interactions from dkvctl and language specific clients
Change propagation feed between masters and slaves
Nexus interactions between masters
Note that, support for encrypting Nexus interactions will be built inside the Nexus module and enabled by DKV during bootstrap.
The text was updated successfully, but these errors were encountered:
We must provide secure means for clients to interact with DKV GRPC endpoints. Specifically, this issue asks for encrypted communication between both client-server as well as server-server interactions. A separate issue will handle servers and possible clients authentication #109 .
We propose to use TLS 1.2 for encrypting both client-server and server-server interactions regardless of the application protocol (GRPC/HTTP). Additionally, we must provide means (via command line flag) for the user to disable security so as to simplify onboarding to DKV during development. Unless the users specify such an override, all the following interactions must be encrypted by default.
dkvctl
and language specific clientsNote that, support for encrypting Nexus interactions will be built inside the Nexus module and enabled by DKV during bootstrap.
The text was updated successfully, but these errors were encountered: