31
When is it necessary to have SSL on the LAN side of a reverse proxy (between the reverse proxy and the server)? (sh.itjust.works)
submitted 2 years ago by to c/homelab@lemmy.ml
12 comments fedilink hide all child comments
 

Without SSL on the LAN side of a reverse proxy, I presume that all traffic between the server and the reverse proxy is unencrypted and, thus, accessible to any device on the LAN.

Which specific scenarios result in this being a concern? The primary concern that I can come up with is if you know that there are untrustworthy entities connected to the LAN (untrustworthy devices, or perhaps malicious individuals).

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 2 years ago (1 child)

Its worth considering to do SNI routing without decryption in the reverse-proxy, but usually it is not a major issue to just terminate.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •