search

smallstep / hello-mtls

:wave: Docs demonstrating mutual TLS configurations in various technologies
Apache License 2.0
87 stars 26 forks source link

Flask (server) #11

Closed alanchrt closed 4 years ago

alanchrt commented 4 years ago

@sourishkrout I just worked to pick this one up, and it looks like it is possible to terminate TLS and do client auth on the flask layer using pyopenssl, but it's definitely not recommended.

Should we write docs for tech like this at all? If we do, should we write them and recommend using nginx or apache for TLS?

I'm inclined to just exclude them from the list so people don't get confused. Closing for now with that approach, but I'll reopen if we think we should document not-recommended approaches, or try to document for a bunch of other servers/reverse proxies.

sourishkrout commented 4 years ago

@alanctkc agreed. flask sounds like a case were people would be better off using a ingress/egress proxy such as linkerd or envoy.