Skip to content

Commit

Permalink
added sentence about downside of https
Browse files Browse the repository at this point in the history
  • Loading branch information
bedroge committed Feb 16, 2024
1 parent 0ff336a commit f830adb
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions docs/filesystem_layer/stratum1.md
Original file line number Diff line number Diff line change
Expand Up @@ -36,6 +36,7 @@ However, EESSI provides a synchronisation server that can be used for setting up
If this is the case, you can try switching to HTTPS by using `https://aws-eu-west-s1-sync.eessi.science` for synchronizing your Stratum 1.
Even though there is no advantage for CVMFS itself in using HTTPS (it has built-in mechasnims for ensuring the integrity of the data),
this will prevent the described issues, as the intrusion prevention system will not be able to inspect the encrypted data.
As HTTPS does introduce some overhead due to the encryption/decryption, it is still recommended to use HTTP as default.

### Manual configuration

Expand Down

0 comments on commit f830adb

Please sign in to comment.