Skip to content

Align on mesh security proposal #91

Description

@hexfusion

What would you like to be added

Split the design doc's mesh security sections into what ships today and what is planned.

Why is this needed

The doc reads two ways on the same subject. Edge Types describes shared-key encryption with no per-site authentication, which matches the code. Transport Security describes per-site authenticated envelopes, which is not implemented.

A reader cannot tell which one describes the system. Three properties the doc calls current are not in the code as of 8a3e83e: per-site authenticated state (tracked in #75), key rotation with overlap, and TCP for large state.

From the Grid review, Gaps.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions