3 ms·
Just because you haven't come across client cert validation requirement, it doesn't mean it's wrong. If you have a bunch of micro services that need to communi
by halayli 11y ago
Just because you haven't come across client cert validation requirement, it doesn't mean it's wrong.
If you have a bunch of micro services that need to communicate with each other securely, client cert validation solves a big problem.
- cperciva 11y agoIf you have a bunch of small services which need to communicate securely, you should be using something like spiped, not TLS. TLS is the right solution iff you need to communicate with third parties whom you can't securely share code or keys with in advance.
- halayli 11y agodon't throw solutions with confidence like they are silver bullets. spiped is unmaintained, doesn't support revocation, not easy to debug in a big infrastructure, and will require a lot more work compared to https + client cert authentication, and doesn't provide multi platform support. PKI is used to build a chain of trust. Whether it involves third parties or not is not the point.
- irv 11y agoyou're replying to the author, and maintainer, of spiped.