tuxnet.dev/posts/tls-for-internal-services

ok back to tls

haha

what about the off-topic drift?

fine i'll try

but it's doable

easier said than done

automate it

what about the cert expiry?

cool

with envoy

how?

i am

anyone actually using mTLS?

fine

negligible

what about the performance hit?

ok

but it's secure

but it's hard to set up

that's the real deal

yeah

mTLS?

what about mutual tls?

idk man

maybe

but it's complicated