Matthew Holt dedcfd4e3d tls: Add distributed_stek module ... This migrates a feature that was previously reserved for enterprise users, according to https://github.com/caddyserver/caddy/issues/2786. TLS session ticket keys are sensitive, so they should be rotated on a regular basis. Only Caddy does this by default. However, a cluster of servers that rotate keys without synchronization will lose the benefits of having sessions in the first place if the client is routed to a different backend. This module coordinates STEK rotation in a fleet so the same keys are used, and rotated, across the whole cluster. No other server does this, but Twitter wrote about how they hacked together a solution a few years ago: https://blog.twitter.com/engineering/en_us/a/2013/forward-secrecy-at-twitter.html		2019-10-09 19:38:26 -06:00
..
distributedstek	tls: Add distributed_stek module	2019-10-09 19:38:26 -06:00
standardstek	Refactor Caddyfile adapter and module registration	2019-08-21 10:46:35 -06:00
acmemanager.go	tls: Change struct fields to pointers, add nil checks; rate.Burst update	2019-09-30 09:07:43 -06:00
connpolicy.go	tls: Change struct fields to pointers, add nil checks; rate.Burst update	2019-09-30 09:07:43 -06:00
fileloader.go	Refactor Caddyfile adapter and module registration	2019-08-21 10:46:35 -06:00
folderloader.go	Refactor Caddyfile adapter and module registration	2019-08-21 10:46:35 -06:00
matchers.go	Refactor Caddyfile adapter and module registration	2019-08-21 10:46:35 -06:00
pemloader.go	tls: Add pem_loader module	2019-10-09 19:34:14 -06:00
sessiontickets.go	Eliminate some TODOs	2019-09-14 18:05:45 -06:00
tls.go	caddytls: nil check on storageClean fields on Stop	2019-10-02 23:39:32 -06:00
values.go	go.mod: Use lego v3 and CertMagic 0.7.0	2019-09-12 17:31:10 -06:00