News for hackers. Stuff that matters.

A comment on HTTP/2-exclusive threats caused by implementation flaws and RFC imperfections. Parent comment

Re:HTTP/2-exclusive threats caused by implementation flaws a... by londons_explore on Friday August 06, 2021 @05:18AM (#28084887)
On kubernetes, cert-manager might get certificates for you, but you'll still need to make sure the application correctly reloads those certs (many application frameworks have no way to reload a certificate at runtime).
[ Parent | on HN ]
Re:HTTP/2-exclusive threats caused by implementation flaws a... by orra on Friday August 06, 2021 @09:00AM (#28086544)
Your reverse proxy can handle the TLS termination. Nginx or Traifik or whatever.

Besides, if you're doing microservices, whatever is managing them should be able to restart them gracefully. No need for reload as such.

[ Parent | on HN ]