Matthew Holt dedcfd4e3d tls: Add distributed_stek module ... This migrates a feature that was previously reserved for enterprise users, according to https://github.com/caddyserver/caddy/issues/2786. TLS session ticket keys are sensitive, so they should be rotated on a regular basis. Only Caddy does this by default. However, a cluster of servers that rotate keys without synchronization will lose the benefits of having sessions in the first place if the client is routed to a different backend. This module coordinates STEK rotation in a fleet so the same keys are used, and rotated, across the whole cluster. No other server does this, but Twitter wrote about how they hacked together a solution a few years ago: https://blog.twitter.com/engineering/en_us/a/2013/forward-secrecy-at-twitter.html		2019-10-09 19:38:26 -06:00
..
caddyhttp	reverse_proxy: Add local circuit breaker	2019-10-09 19:28:07 -06:00
caddytls	tls: Add distributed_stek module	2019-10-09 19:38:26 -06:00
filestorage	Add license header to filestorage.go	2019-09-30 09:08:04 -06:00