Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Require encryption #168

Merged
merged 2 commits into from
Apr 20, 2023
Merged

Require encryption #168

merged 2 commits into from
Apr 20, 2023

Conversation

tfpauly
Copy link
Collaborator

@tfpauly tfpauly commented Apr 19, 2023

Closes #163

@tfpauly tfpauly self-assigned this Apr 19, 2023
draft-ietf-masque-connect-ip.md Outdated Show resolved Hide resolved
Co-authored-by: David Schinazi <DavidSchinazi@users.noreply.github.com>
Copy link
Collaborator

@gloinul gloinul left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think the MUST can be missinterpreted. Either that one MUST always use TLS or QUIC encryption, or that what I think is actually written. TLS or QUIC MUST be used to get confidentiality, integrity and authentication. I could see this rewritten as "confidentiality, integrity and authentication is RECOMMENDED to use, to achieve this TLS or QUIC encryption is used depending on HTTP version.

@DavidSchinazi DavidSchinazi merged commit d8e8cf5 into main Apr 20, 2023
@DavidSchinazi DavidSchinazi deleted the tfpauly-patch-2 branch April 20, 2023 17:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Mandate usage of HTTPS
4 participants