Introducing CFSSL 1.2
Mar 31, 2016Nick Sullivan

Summary
This post introduces CFSSL 1.2, detailing new features like a TLS endpoint scanner for evaluating server security configurations, a Transport package for Go developers to simplify encrypted connections (handling key management, certificate issuance, and renewal), and enhanced revocation support with PostgreSQL backend, CRL, and OCSP. It also highlights the motivation behind treating internal networks as hostile and the use of CFSSL for service-to-service encryption and mutual authentication.
More from the Open Source Software & Community Contributions trail
- New URLPattern API brings improved pattern matching to Node.js and Cloudflare Workers
- Open source all the way down: Upgrading our developer documentation
- polyfill.io now available on cdnjs: reduce your supply chain risk
- Open sourcing Pingora: our Rust framework for building programmable network services
- Open sourcing our fork of PgBouncer