v2.0.0
·
3 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
cda1991
This commit was signed with the committer’s verified signature.
socket-bot
Socket Bot
v2.0.0 — Enable verified outbound connections by default
The firewall now has api and upstream verify set to true to better match best security practices and prevent potential man-in-the-middle attacks out of the box. This does mean if your environment uses things like content proxies without custom CA certificates being imported it could introduce breaking functionality. Action may be required (breaking change): if your firewall connects to internal or private registries that use self-signed or privately issued certificates, you'll need to provide your certificate authority so it can be trusted, or turn off verification for those connections. Thanks to Alberto Garcia at Magic for reporting the issue.