4 ms·
You can just add encryption to your backend private network (e.g. Wireguard) Which has the benefit of encrypting everything and avoids the overhead of starting
by ChocolateGod 2y ago
You can just add encryption to your backend private network (e.g. Wireguard)
Which has the benefit of encrypting everything and avoids the overhead of starting a TLS socket for every http connection.
- jeroenhd 2y agoIf you're going that route, you may as well just do HTTPS again. If you configure your TLS cookies and session resumption right, you'll get all of the advantages of fancy post-quantum crypto without having to go back to the days of manually setting up encrypted tunnels like when IPSec did the rounds.