4 ms·
I'm so fuzzy on the details but isn't this what client certs are for?
by chrisweekly 6y ago
I'm so fuzzy on the details but isn't this what client certs are for?
- feanaro 6y agoYou could accomplish this with client certs too, sure. A random secret is a simpler solution in many ways and accomplishes the same goal, though.
- cjonas 6y agoThe cert couldn't obviously couldn't be static in this case (otherwise it would be trivial to get the private key). Creating a cert during "install" probably adds a good bit of complexity (especially if the map has multiple env targets)