6 ms·
I'm not trying to antagonize here, but what do you find so bad? I would call it a little bit more painful; three lines to add to an nginx config, along with gen
by bubblesorting 11y ago
I'm not trying to antagonize here, but what do you find so bad? I would call it a little bit more painful; three lines to add to an nginx config, along with generating the cert. Maybe 10 minutes of work? Thirty if you're getting a CA to sign your cert for you. I could see pain if you need to wait for finance to approve, or if you're trying to get domains validated on behalf of a customer. And I suppose it adds another setup step to wireshark (if you need to debug neat bugs), but that's a set-it-up-once-and-forget-about-it thing.
- Canada 11y agoIt's a scalability problem. If you have many web servers behind a reverse proxy that takes care of TLS it's often pointless to waste processing power on encryption in between.
- anthony_franco 11y agoYep. And on top of that a reverse proxy is unable to inspect the requests to route them smartly (based on path, cookies, etc.).
- Canada 11y agoWell, the reverse proxy would have made the backend request itself, so it's free to inspect or modify anything.