News for hackers. Stuff that matters.

A comment on Why HTTPS for Everything?. Parent comment

Re:Why HTTPS for Everything? by dx034 on Tuesday January 03, 2017 @07:42AM (#13308708)
I thought it was recommended to use https between microservices for all communication? Otherwise the user might think their data is encrypted even though it travels plain-text through networks after the first server, as not all services will run in a separated network.
[ Parent | on HN ]
Re:Why HTTPS for Everything? by MichaelGG on Tuesday January 03, 2017 @09:01AM (#13309159)
That's entirely up to the app. With Cloudflare it's not even normal for HTTPS to mean your data got to the server encrypted.

And anyways you can solve it in the same way: nginx LBs to terminate SSL internally.

[ Parent | on HN ]