dries/ocman
1
0
Fork 1
Code Issues 38 Pull requests 4 Projects Releases 122 Packages Wiki Activity Actions 1

docs: warn that plaintext remote transport exposes tokens #543

Merged
dries merged 1 commit from docs/warn-plaintext-remote into main 2026-08-21 16:31:07 +02:00
Conversation 1 Commits 1 Files changed 3 +12 -2
dries commented 2026-08-21 12:43:22 +02:00
Owner
Copy link

Summary

  • emit a startup warning when trusted-overlay plaintext transport is enabled
  • document that bearer tokens and session traffic are unencrypted over grpc://
  • clarify that a private LAN alone is not a trusted encrypted overlay

Testing

  • make test
  • make lint
  • make docs-build
  • make build

Refs #412

## Summary - emit a startup warning when trusted-overlay plaintext transport is enabled - document that bearer tokens and session traffic are unencrypted over grpc:// - clarify that a private LAN alone is not a trusted encrypted overlay ## Testing - make test - make lint - make docs-build - make build Refs #412
docs: warn that plaintext remote transport exposes tokens
Some checks failed
CI / Frontend (pull_request) Successful in 7m43s
Details
CI / Playwright E2E (pull_request) Successful in 9m1s
Details
CI / Backend (pull_request) Successful in 9m2s
Details
CI / Coverage Results (pull_request) Successful in 21s
Details
CI / Build (pull_request) Successful in 4m50s
Details
CI / Semantic Tag (pull_request) Successful in 5s
Details
Pages / Build and publish site (push) Waiting to run
Details
CI / Playwright E2E (push) Has been cancelled
Details
CI / Backend (push) Has been cancelled
Details
CI / Frontend (push) Has been cancelled
Details
CI / Coverage Results (push) Has been cancelled
Details
CI / Build (push) Has been cancelled
Details
CI / Semantic Tag (push) Has been cancelled
Details
2e6e2256ae
forgejo-actions commented 2026-08-21 12:52:44 +02:00
Copy link

Coverage ratchet: ✅ pass

Suite Baseline This PR Δ
frontend 71.41% 71.41% +0.00 ✅
go 81.30% 81.30% +0.00 ✅

Tolerance: -0.1%. Baseline stored on gh-pages.

<!-- coverage-ratchet --> ### Coverage ratchet: ✅ pass | Suite | Baseline | This PR | Δ | | |---|---|---|---|---| | frontend | 71.41% | 71.41% | +0.00 | ✅ | | go | 81.30% | 81.30% | +0.00 | ✅ | _Tolerance: -0.1%. Baseline stored on `gh-pages`._
dries merged commit 2e6e2256ae into main 2026-08-21 16:31:07 +02:00
dries deleted branch docs/warn-plaintext-remote 2026-08-21 16:31:07 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
backend

Go backend code

  
bug

Something is broken or incorrect

  
chore

Maintenance, tooling, or cleanup

  
duplication

Code duplication to be addressed

  
effort:complex

Significant effort or risk

  
effort:medium

Moderate effort required

  
effort:trivial

Quick fix, low complexity

  
enhancement

New feature or capability

  
follow-up

Follow-up from a PR review or shipped change

  
frontend

TypeScript / React frontend code

  
fullstack

Touches both backend and frontend

  
priority:high

Should be addressed soon

  
ready-for-agent

Agent-grabbable ticket, fully specced

  
refactor

Code restructuring without behaviour change

  
security

Security related

No labels
backend
bug
chore
duplication
effort:complex
effort:medium
effort:trivial
enhancement
follow-up
frontend
fullstack
priority:high
ready-for-agent
refactor
security
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
dries/ocman!543
No description provided.