4 ms·
PHK has argued that the SSL/TLS libraries we have is a nightmare when it comes security design. He rather favor "jailing" these processes as a separate process.
by olavgg 10y ago
PHK has argued that the SSL/TLS libraries we have is a nightmare when it comes security design. He rather favor "jailing" these processes as a separate process. So if hell breaks lose, like with Heartbleed, your Varnish process should still be "safe".
- CrLf 10y agoI agree. But that doesn't require showing that separation to users. Varnish could internally separate TLS from the rest while still behaving as a single service.