Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

enhancement-112: Improvements around the Transport Key (NK) #113

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

THS-on
Copy link
Member

@THS-on THS-on commented Sep 25, 2024

No description provided.

Signed-off-by: Thore Sommer <mail@thson.de>

## Alternatives

- Eliminate to NK fully (would require for us to force enable mTLS when using payloads)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In order to reach a point where we can make mTLS mandatory, we would need to provide a seamless certificate configuration/bootstrapping/rotation solution within Keylime (not sure what form such solution would take).

@maugustosilva
Copy link
Contributor

I have read the proposal, and see that it contemplates the continued use of Secure Payloads for scenarios where the mTLS is disabled. That being said, I see no impediments on proceeding with it.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants