3 ms·
Why do you think go would be run behind a reverse proxy for TLS?
by zacmps 9y ago
Why do you think go would be run behind a reverse proxy for TLS?
- xienze 9y agoBecause otherwise you have to include in your application the config necessary to: * Enable compression, if desired. * Redirect HTTP requests to HTTPS. * Add headers for security best practices like OCSP stapling, DH params, HTTP STS, HPKP, etc. Those are really things best handled in the edge and not by your application. Your proxy is probably going to do a better job of these things than you are and the config will be simpler. Not to mention if you have to update any of those settings you can do a hot-reload of your proxy's config -- your Go app has to be recompiled. And oh yeah, the moment you have more than one Go app sitting behind your host you need a proxy anyway.