Comments (1)
This is no longer a WIBNI, I'm upgrading it to Long-Term Goal. I'm convinced this is substantially more important for privacy and security than I previously realised.
More work needs to be done here. Ideally we want a unified way to control security policy, preferably with fine grained control. For example, users ought to be able to specify different security policy for different hosts on different schemes. This would allow users to have security policy that says something like:
- If accessing
twitter.com
over HTTPS, verify certificate against a local copy, only allow strong ciphers, do not follow AltSvc recommendations; else - If accessing
twitter.com
over HTTP, use OppSec where available, verify certificate against a local copy, allow weak ciphers, follow AltSvc recommendations; else - If accessing any other site over HTTPS, verify certificate against local set of root CAs, only allow strong ciphers, do follow AltSvc recommendations; else
- If accessing any other site over HTTP, use OppSec where available, do not perform cert verification, allow weak ciphers, follow AltSvc recommendations.
This form of fine-grained security policy is useful, but we need to have an intelligent API and intelligent defaults. Again, most users won't need this so they should fall into a pit of success, with secure default values and behaviours. Users who do want it should be able to set extremely fine-grained security policy.
A further benefit would be to have detailed documentation about how to use the security policy tools. This should provide users with a good idea of what actions strengthen security, what actions weaken security, and what you gain/lose in functionality when performing those actions.
from hyper.
Related Issues (20)
- Ping does not work correctly HOT 3
- Edit on github link on RTD broken.
- Transfer of maintenance HOT 3
- HTTP20Adapter sends extra headers ?? HOT 20
- How to control ssl context in a HTTP20Adapter HOT 1
- hyper.contrib.HTTP20Adapter with requests.session not working on python 2.7
- Upgrade from HTTP/1.1. to HTTP2 not working HOT 2
- Could you please make MAX_CHUNK configurable? HOT 1
- Upgrade to the latest h2 HOT 2
- How resolve DNS to a specific IP?
- HTTP11Connection does not use http/1.1 protocol HOT 1
- hyper hangs while POSTing to Apple APNS servers HOT 2
- Forcing Cleartext HTTP2 Without Upgrade Mechanism HOT 3
- How can I add query parameters when using class HTTP20Connection?
- Python deprecation warnings: collections, imp, logging.warn
- basestring erroneously ignores unicode in Python2.7
- Client certificates?
- Retain connection in HTTP/2 using hyper to avoid authentication for every request
- HTTP20Connection.request has no mechanism to send duplicate headers HOT 3
- The orders of sending packages in Debug mode and Run mode are different.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from hyper.