search

thomasp85 / fiery

A flexible and lightweight web server
https://fiery.data-imaginist.com
Other
240 stars 12 forks source link

TLS 1.2 support? #48

Open koogordo opened 2 years ago

koogordo commented 2 years ago

I'm looking into this package as an option for serving data science models at my company. We have a security compliance policy that dictates we can only use http server frameworks that support/ are compatible with TLS 1.2 or higher. Does fiery meet this requirement?

thomasp85 commented 2 years ago

There are not really any low level http servers in R that supports encryption - this means that anything build on top of it (such as fiery) has the same limitations. However, I would generally not advice anything developed in R to be exposed directly so this limitation is less of an issue. If you want to serve things from R I would advice you to create an http API in fiery and use e.g. nginx or apache to expose it. This allows you to setup the right type of encryption and do e.g. load balancing etc