рабочий вариант, но скороть 10 МБит
This commit is contained in:
@@ -8,7 +8,7 @@ transport architecture. The active inter-node transport model is QUIC-only; see
|
||||
`docs/architecture/SECURE_ACCESS_FABRIC_TARGET.md`.
|
||||
|
||||
Status: P3.3 historical test-stand smoke complete for encrypted resource
|
||||
secrets, assignment-time resolution, and legacy RDP baseline behavior with
|
||||
secrets, assignment-time resolution, and compat RDP baseline behavior with
|
||||
smoke-only direct-worker trust.
|
||||
|
||||
This document defines the next security hardening layer around the accepted RDP
|
||||
@@ -110,7 +110,7 @@ In `APP_ENV=production`:
|
||||
|
||||
- RDP/VNC/SSH resources must have `secret_ref`.
|
||||
- Plain credential-like keys are rejected in resource `metadata`.
|
||||
- Session start rejects legacy resources that still contain plaintext
|
||||
- Session start rejects compat resources that still contain plaintext
|
||||
credential-like metadata.
|
||||
- backend startup requires secret encryption key material.
|
||||
- Development/smoke environments may continue using plaintext metadata while
|
||||
|
||||
Reference in New Issue
Block a user