search

sigstore / rekor

Software Supply Chain Transparency Log
https://sigstore.dev
Apache License 2.0
904 stars 164 forks source link

Add option to enable TLS for communication with Trillian #2163

Closed fghanmi closed 4 months ago

fghanmi commented 5 months ago

Description Currently, the communication between Rekor and Trillian server does not support Transport Layer Security. This exposes the system to potential security risks such as data interception and man-in-the-middle attacks. To enhance the security and integrity of services communications, it is imperative to introduce an option to enable TLS - Rekor would ensure the verification of Trillian's certificates.

bobcallaway commented 4 months ago

I think this is complete now?