Updated security.md about mitm.

Thanks to xet7 !
This commit is contained in:
Lauri Ojansivu 2023-12-07 14:52:20 +02:00
parent 85353d9f90
commit b4c9c1df9a

View file

@ -60,7 +60,7 @@ and by by companies that have 30k users.
## SSL/TLS ## SSL/TLS
- SSL/TLS encrypts traffic between webbrowser and webserver. - SSL/TLS encrypts traffic between webbrowser and webserver.
- If you are thinking about TLS MITM, look at Caddy 2 webserver MITM detections. - If you are thinking about TLS MITM, look at https://github.com/caddyserver/caddy/issues/2530
- Let's Encrypt TLS requires publicly accessible webserver, that Let's Encrypt TLS validation servers check. - Let's Encrypt TLS requires publicly accessible webserver, that Let's Encrypt TLS validation servers check.
- If firewall limits to only allowed IP addresses, you may need non-Let's Encrypt TLS cert. - If firewall limits to only allowed IP addresses, you may need non-Let's Encrypt TLS cert.
- For On Premise: - For On Premise: