Skip to content

security: default --tls to true#8

Merged
raullenchai merged 1 commit intomainfrom
fix/tls-default
Mar 14, 2026
Merged

security: default --tls to true#8
raullenchai merged 1 commit intomainfrom
fix/tls-default

Conversation

@raullenchai
Copy link
Copy Markdown
Member

Summary

  • Transport security (--tls) now defaults to true instead of false
  • Agents connecting to plaintext coordinators (local dev) should use --tls=false explicitly
  • Prevents HMAC credentials from being sent in cleartext over the wire
  • No impact on current beta testers — they connect to :443 which already auto-enabled TLS

Test plan

  • go vet ./... clean
  • Verify beta agents still connect with --tls flag (no-op, already true)
  • Verify local dev works with --tls=false

🤖 Generated with Claude Code

Transport security is now enabled by default. Agents connecting to
plaintext coordinators (local dev) should use --tls=false explicitly.
This prevents credentials from being sent in cleartext over the wire.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@raullenchai raullenchai merged commit 0b9f131 into main Mar 14, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant