Comparison

CHANGES @ 12330:38b5b05407be

various: Require encryption by default for real These options have been specified (and enabled) in the default config file for a long time. However if unspecified in the config, they were not enabled. Now they are. This may result in a change of behaviour for people using very old config files that lack the require_encryption options. But that's what we want.
author Kim Alvefur <zash@zash.se>
date Sat, 25 Dec 2021 16:23:40 +0100
parent 12303:fa79db7e0a4d
child 12333:ed8a4f8dfd27
comparison
equal deleted inserted replaced
12329:c980210ca095 12330:38b5b05407be
31 - SCRAM-SHA-256 31 - SCRAM-SHA-256
32 - Direct TLS (including https) certificates updated on reload 32 - Direct TLS (including https) certificates updated on reload
33 - Pluggable authorization providers (mod_authz_) 33 - Pluggable authorization providers (mod_authz_)
34 - Easy use of Mozilla TLS recommendations presets 34 - Easy use of Mozilla TLS recommendations presets
35 - Unencrypted HTTP port (5280) restricted to loopback by default 35 - Unencrypted HTTP port (5280) restricted to loopback by default
36 - require_encryption options default to 'true' if unspecified
36 37
37 ### HTTP 38 ### HTTP
38 39
39 - CORS handling now provided by mod_http 40 - CORS handling now provided by mod_http
40 - Built-in HTTP server now handles HEAD requests 41 - Built-in HTTP server now handles HEAD requests