Re: [go-nuts] setting up a hardened https server in go 1.13

2020-02-21 Thread Kevin Chadwick
>But without a list of vulnerabilities, this sounds to me like FUD. Fud implies intentional deceit, not the case. Now that you have made me think about it then if security is your priority over performance then OpenHttpd certainly provides better protection of the TLS key and various server fun

Re: [go-nuts] setting up a hardened https server in go 1.13

2020-02-21 Thread DrGo
> > On 2020-02-21 16:13, Amnon Baron Cohen wrote: >> > >> Default connection limits suggest it isn't production ready by default >> and so is >> the main reason...so define properly hardened, but also. > > > For an average schmuck like me, "hardened" means that I am not criminally neglectin

Re: [go-nuts] setting up a hardened https server in go 1.13

2020-02-21 Thread Amnon Baron Cohen
On Friday, 21 February 2020 17:49:06 UTC, Kevin Chadwick wrote: > > On 2020-02-21 16:13, Amnon Baron Cohen wrote: > > > Default connection limits suggest it isn't production ready by default and > so is > the main reason...so define properly hardened, but also. hardened means following the

Re: [go-nuts] setting up a hardened https server in go 1.13

2020-02-21 Thread Kevin Chadwick
On 2020-02-21 16:13, Amnon Baron Cohen wrote: > Interesting. > > What vulnerabilities does OpenBSDs httpd protect against, which a properly > hardened net/http does not? > Default connection limits suggest it isn't production ready by default and so is the main reason...so define properly hardene

Re: [go-nuts] setting up a hardened https server in go 1.13

2020-02-21 Thread Amnon Baron Cohen
Interesting. What vulnerabilities does OpenBSDs httpd protect against, which a properly hardened net/http does not? The problem with proxying through OpenBSD's server, nginx or any other server is that there is another moving part that you need to master, configure, monitor, and which may have

Re: [go-nuts] setting up a hardened https server in go 1.13

2020-02-21 Thread Kevin Chadwick
On 2020-02-21 01:42, DrGo wrote: > Are there more up-to-date recommendations for go 1.13? Personally I run Go behind either app engine or via fcgi behind OpenBSD httpd. I'm not sure any other https server has the same level of key protection as revamped in OpenBSDs httpd (separate to LibreSSL), si

[go-nuts] setting up a hardened https server in go 1.13

2020-02-20 Thread DrGo
https://blog.gopheracademy.com/advent-2016/exposing-go-on-the-internet/ I found this article very helpful in setting up a hardened https server. But It dates back to 2016 and go 1.8. Are there more up-to-date recommendations for go 1.13? Thanks, -- You received this message because you are