Commit ccde9a2
committed
Update Akka.Remote security documentation
Major overhaul of the security documentation to reflect new TLS features
and provide comprehensive security guidance for production deployments.
Changes:
- Document new startup certificate validation feature (v1.5.52+)
- Document new mutual TLS authentication support (v1.5.52+)
- Add detailed suppress-validation guidance with security implications
- Provide Windows Certificate Store configuration examples
- Include PowerShell scripts for certificate management
- Add troubleshooting section for common TLS issues
- Update configuration examples from insecure to secure defaults
- Fix deprecated external links (Microsoft Learn, IETF, OWASP)
- Add security analysis for different configuration levels
- Include migration guide for upgrading to mutual TLS
- Add best practices summary with 10 key recommendations
- Document common pitfalls and their solutions
Security improvements:
- Changed example configs to use suppress-validation = false by default
- Added warnings about using suppress-validation = true in production
- Emphasized defense-in-depth with VPNs + TLS + mutual TLS
- Documented proper self-signed certificate usage for development
The documentation now provides clear guidance on:
- What TLS protects against (and what it doesn't)
- When to use mutual TLS vs standard TLS
- How to properly configure certificates in production
- How to troubleshoot common certificate permission issues
Related: Freshdesk akkadotnet#538 - TLS certificate validation improvements1 parent b25327a commit ccde9a2
1 file changed
+551
-41
lines changed
0 commit comments