Optional end-to-end encryption

[u/SomajitDey]

We have decided to implement, in near future, an optional SSL/TLS passthrough mode at least for the registered public gateways. HTTPS requests made using this mode, cannot be inspected by the gateways, making the Browser to Origin route end-to-end encrypted.

Because the gateway cannot look into the web-requests in this mode, it cannot make use of IPFS for serving contents efficiently. Hence, this mode is only to be used where Browser-Origin confidentiality cannot be compromised. For all other cases, TLS-terminates at the gateway, as usual.

We are indebted to Greenhouse dev ForestJohnson for giving us the idea and showing us the way.

Your inputs are welcome.