Make defaults secure - Githubissues

wintercg / proposal-sockets-api

Proposal for an API for establishing TCP connections in Non-Browser JavaScript runtime environments

https://sockets-api.proposal.wintercg.org/

Other

46 stars 2 forks source link

Make defaults secure #21

Open teabroker opened 9 months ago

teabroker commented 9 months ago

It should be decided not to make insecure options to be default. Developers usually rely on default values as secure enough. It could and would lead to data leakages and security breaches.

The secureTransport option in SocketOptions should not be "off".

jasnell commented 8 months ago

Generally agree but we need to flesh out the minimal set of configuration options for tls/secure transport first.