3 ms·
Is sending plaintext traffic over the open Internet "the way most people do TLS in 2026"? Am I missing something from the post?
by Antirust3743 5mo ago
Is sending plaintext traffic over the open Internet "the way most people do TLS in 2026"? Am I missing something from the post?
- tracker1 5mo agoMany (most?) are hosting web applications and/or content in separate applications and sometimes servers from where TLS (HTTPS) termination happens. HAProxy, Traefik, Caddy and Nginx as reverse proxy and TLS termination servers are pretty common, even more so if you're containerizing your applications themselves. It dramatically simplifies the application stack. While I may make the argument that most are probably hosting and doing php on the same server, it's not the typical approach for any custom software at this point.
- SahAssar 5mo agoIt's vastly different to do TLS termination within your own network and to do it on a rando VPS and then send normal TCP over the internet. It's not an argument of it being on the same server.
- traderj0e 5mo agoThe VPS is your security in this case. It's not sending plaintext over the internet, is it? Edit: No, the article mentions listening on port 80 at home. I thought they'd be SSH tunneling or something. That is unusual, but I guess for a static website it doesn't really matter.
- SahAssar 5mo ago> That is unusual, but I guess for a static website it doesn't really matter. It sorta does matter. Either the actual raspi does nothing of value or the traffic has value that should be protected. Sure, I heard the argument that public HTTP traffic does not need encryption but if it is of any value then both parties have a interest in it unmanipulated, uncenscored, validated or all of the before. Even if it is just preventing the ISP injecting dumb ads.
- traderj0e 5mo agoYeah that's a valid concern. Idk, nothing about this setup makes sense.
- deleted 5mo ago[deleted]