Having a separate process for SSL termination is of course completely doable, but was a little more challenging. We use client-side certificates for application

Having a separate process for SSL termination is of course completely doable, but was a little more challenging. We use client-side certificates for application level authentication logic, so we would have needed to side-channel the authentication information from our reverse proxy to our app. Again, completely, totally doable, was just harder for our transliteration project [1]. Good advice. [1] https://www-staging.spacemonkey.com/blog/posts/go-space-monkey https://www-staging.spacemonkey.com/blog/posts/go-space-monk...