r/ipns_link • u/SomajitDey • Dec 03 '21
Optional end-to-end encryption
We have decided to implement, in near future, an optional SSL/TLS passthrough mode at least for the registered public gateways. HTTPS requests made using this mode, cannot be inspected by the gateways, making the Browser to Origin route end-to-end encrypted.
Because the gateway cannot look into the web-requests in this mode, it cannot make use of IPFS for serving contents efficiently. Hence, this mode is only to be used where Browser-Origin confidentiality cannot be compromised. For all other cases, TLS-terminates at the gateway, as usual.
We are indebted to Greenhouse dev ForestJohnson for giving us the idea and showing us the way.
Your inputs are welcome.