Https ?

[bastien-roucaries]

Hi,

Does it work over https ?

It will be better to check if it work over https from a security point of view

[bastien-roucaries]

Note that in order to be safer using a proxy like stunnel instead of creating your own certicate and own crypto chain.

KISS please

[bastien-roucaries]

In fact we care about your package for securing old scanner.

adding a freedom box will secure old scanner printer

[SimulPiscator]

I was thinking about integrating OpenSSL support through a std::streambuf descendant. Would that violate KISS?

[bastien-roucaries]

I was thinking about integrating OpenSSL support through a std::streambuf descendant. Would that violate KISS?

It is usually harder to support all ssl option using the lib and do in a secure way, think about client certificate, perfect forward secret and so on. A lot of option to code.

stunnel over unix socket is KISS simple and audited. This is less security to audit on your side and it is better. KISS

[bastien-roucaries]

Note that nginx in transparent proxy accept unix socket KISS

[SimulPiscator]

OK, there is a unix socket option now.