{"action":"created","issue":{"url":"https://api.github.com/repos/runconduit/conduit/issues/386","repository_url":"https://api.github.com/repos/runconduit/conduit","labels_url":"https://api.github.com/repos/runconduit/conduit/issues/386/labels{/name}","comments_url":"https://api.github.com/repos/runconduit/conduit/issues/386/comments","events_url":"https://api.github.com/repos/runconduit/conduit/issues/386/events","html_url":"https://github.com/runconduit/conduit/issues/386","id":298024132,"number":386,"title":"The Destination service should indicate, for each destination, whether the service supports TLS","user":{"login":"briansmith","id":16816,"avatar_url":"https://avatars0.githubusercontent.com/u/16816?v=4","gravatar_id":"","url":"https://api.github.com/users/briansmith","html_url":"https://github.com/briansmith","followers_url":"https://api.github.com/users/briansmith/followers","following_url":"https://api.github.com/users/briansmith/following{/other_user}","gists_url":"https://api.github.com/users/briansmith/gists{/gist_id}","starred_url":"https://api.github.com/users/briansmith/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/briansmith/subscriptions","organizations_url":"https://api.github.com/users/briansmith/orgs","repos_url":"https://api.github.com/users/briansmith/repos","events_url":"https://api.github.com/users/briansmith/events{/privacy}","received_events_url":"https://api.github.com/users/briansmith/received_events","type":"User","site_admin":false},"labels":[{"id":846633730,"url":"https://api.github.com/repos/runconduit/conduit/labels/priority/P0","name":"priority/P0","color":"00ff22","default":false}],"state":"open","locked":false,"assignee":{"login":"hawkw","id":2796466,"avatar_url":"https://avatars1.githubusercontent.com/u/2796466?v=4","gravatar_id":"","url":"https://api.github.com/users/hawkw","html_url":"https://github.com/hawkw","followers_url":"https://api.github.com/users/hawkw/followers","following_url":"https://api.github.com/users/hawkw/following{/other_user}","gists_url":"https://api.github.com/users/hawkw/gists{/gist_id}","starred_url":"https://api.github.com/users/hawkw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hawkw/subscriptions","organizations_url":"https://api.github.com/users/hawkw/orgs","repos_url":"https://api.github.com/users/hawkw/repos","events_url":"https://api.github.com/users/hawkw/events{/privacy}","received_events_url":"https://api.github.com/users/hawkw/received_events","type":"User","site_admin":false},"assignees":[{"login":"hawkw","id":2796466,"avatar_url":"https://avatars1.githubusercontent.com/u/2796466?v=4","gravatar_id":"","url":"https://api.github.com/users/hawkw","html_url":"https://github.com/hawkw","followers_url":"https://api.github.com/users/hawkw/followers","following_url":"https://api.github.com/users/hawkw/following{/other_user}","gists_url":"https://api.github.com/users/hawkw/gists{/gist_id}","starred_url":"https://api.github.com/users/hawkw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hawkw/subscriptions","organizations_url":"https://api.github.com/users/hawkw/orgs","repos_url":"https://api.github.com/users/hawkw/repos","events_url":"https://api.github.com/users/hawkw/events{/privacy}","received_events_url":"https://api.github.com/users/hawkw/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/runconduit/conduit/milestones/7","html_url":"https://github.com/runconduit/conduit/milestone/7","labels_url":"https://api.github.com/repos/runconduit/conduit/milestones/7/labels","id":3134345,"number":7,"title":"0.5.0","description":"Controllable Deadlines/Timeouts","creator":{"login":"olix0r","id":240738,"avatar_url":"https://avatars3.githubusercontent.com/u/240738?v=4","gravatar_id":"","url":"https://api.github.com/users/olix0r","html_url":"https://github.com/olix0r","followers_url":"https://api.github.com/users/olix0r/followers","following_url":"https://api.github.com/users/olix0r/following{/other_user}","gists_url":"https://api.github.com/users/olix0r/gists{/gist_id}","starred_url":"https://api.github.com/users/olix0r/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/olix0r/subscriptions","organizations_url":"https://api.github.com/users/olix0r/orgs","repos_url":"https://api.github.com/users/olix0r/repos","events_url":"https://api.github.com/users/olix0r/events{/privacy}","received_events_url":"https://api.github.com/users/olix0r/received_events","type":"User","site_admin":false},"open_issues":59,"closed_issues":50,"state":"open","created_at":"2018-02-21T19:35:41Z","updated_at":"2018-05-29T22:25:39Z","due_on":null,"closed_at":null},"comments":11,"created_at":"2018-02-17T18:08:17Z","updated_at":"2018-05-29T22:55:44Z","closed_at":null,"author_association":"MEMBER","body":"Along with the destination IP address and port, the destination service should indicate whether the service supports TLS using the conduit CA. I propose that this indicator be an enumeration something like this:\r\n\r\n```protobuf\r\nenum TLSSupport {\r\n    // Assume it doesn't support TLS.\r\n    Unknown = 0;\r\n\r\n    // Assume it supports TLS using the default mesh settings.\r\n    MeshDefault = 1;\r\n}\r\n```\r\n\r\nInitially the Destination service should use `TLSSupport::MeshDefault` for any endpoint that has the conduit proxy injected into it (as determined from the EndPoints API), and `TLSSupport::Unknown` for destinations that aren't discovered by the EndPoints service.\r\n\r\nThis would make the Destinations service will be part of the TCB for the mesh. Later when routing is added we will revisit this, hopefully by fully moving the TLS decision making to routing."},"comment":{"url":"https://api.github.com/repos/runconduit/conduit/issues/comments/392973801","html_url":"https://github.com/runconduit/conduit/issues/386#issuecomment-392973801","issue_url":"https://api.github.com/repos/runconduit/conduit/issues/386","id":392973801,"user":{"login":"hawkw","id":2796466,"avatar_url":"https://avatars1.githubusercontent.com/u/2796466?v=4","gravatar_id":"","url":"https://api.github.com/users/hawkw","html_url":"https://github.com/hawkw","followers_url":"https://api.github.com/users/hawkw/followers","following_url":"https://api.github.com/users/hawkw/following{/other_user}","gists_url":"https://api.github.com/users/hawkw/gists{/gist_id}","starred_url":"https://api.github.com/users/hawkw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hawkw/subscriptions","organizations_url":"https://api.github.com/users/hawkw/orgs","repos_url":"https://api.github.com/users/hawkw/repos","events_url":"https://api.github.com/users/hawkw/events{/privacy}","received_events_url":"https://api.github.com/users/hawkw/received_events","type":"User","site_admin":false},"created_at":"2018-05-29T22:55:44Z","updated_at":"2018-05-29T22:55:44Z","author_association":"MEMBER","body":"@briansmith, if possible, I'd like to get your approval on this proposal before going too much farther on this."}}
{"actor":{"display_login":"hawkw"}}