From the readme: > By using it, you can run any existing web application over HTTPS, with only one extra line of configuration. You can do authentication, ssl

From the readme: > By using it, you can run any existing web application over HTTPS, with only one extra line of configuration. You can do authentication, ssl, authorization etc. all in one place. Downsides: - difficult to scale - no deep defense - CSRF exposure because applications are not separated by domain I’m having good experiences with this approach