News for hackers. Stuff that matters.
Re:NSA Kubernetes Hardening Guidance [pdf] by xyst on Wednesday August 04, 2021 @12:23AM (#28057281)
TLS terminating is fine for most use cases (basic web services), but if you are protecting PII information you need to/should protect from external and internal threats.

Maybe a disgruntled sys admin decides to capture data coming in from the load balancer between the service(s) and sell it to the highest bidder. If traffic is encrypted between the load balancer and underlying service, it makes it much harder to do.

Re:NSA Kubernetes Hardening Guidance [pdf] by fomine3 on Wednesday August 04, 2021 @12:44AM (#28057383)
like protecting from three letter agency