Skip to content

Security: mattbostock/timbala

Security

docs/security.md

Security

Dependencies

Timbala has no operational dependencies.

Timbala uses the Go programming language.

Encryption and authentication

It is assumed that Timbala will run in a trusted environment.

Communications between nodes and from nodes to clients is unauthenticated and unencrypted. Please see this GitHub issue for more details.

You should use a reverse HTTP proxy if you wish to add Transport Layer Encryption or add authentication to Timbala's HTTP APIs. One way to do so would be to use a service mesh such as Istio.

Multi-user or multi-tenant support

Timbala has no concept of users or tenants; a request to the Timbala API can read and write to all data.

See the GitHub issue for multi-tenant support.

There aren’t any published security advisories