3 ms·
No sane infrastructure engineer would let you do anything other than TLS in production. Devs are largely untrusted to get security correct.
by p_ing 1y ago
No sane infrastructure engineer would let you do anything other than TLS in production. Devs are largely untrusted to get security correct.
- getvictor 1y agoYes, I'm assuming you're always running TLS. The question is whether to use mTLS (mutual TLS) vs HTTP message signatures to verify that the request is coming from a trusted client.