Details
-
New Feature
-
Status: Needs Feedback (View Workflow)
-
Major
-
Resolution: Unresolved
-
None
-
None
Description
Customer states:
"TLS is not only a way to encrypt communication, it also authenticates the server to the client, which checks that the certificate presented is fully valid for the hostname used (right CN/SAN, and the current date inside the period of validity). This matters for us as per our compliance requirements, both internal and external like PCI-DSS, all communications have to be protected. We can't have nodes sending sensitive data if somebody managed to have a rogue server up and running on the same IP address."