> By necessity, you are also also giving it access to your domain certificates and private keys. By necessity? I'd argue the opposite, by necessity don't do th

> By necessity, you are also also giving it access to your domain certificates and private keys. By necessity? I'd argue the opposite, by necessity don't do this at all or ever. Is this person terminating SSL at their node app? Because for anything but a toy that's probably a bad idea.