What's the strategy with respect to cryptographic primitives in the ABI?
Envoy currently exposes verify_signature as a foreign function because some customers need FIPS certification.
Do we recommend using boringssl "update stream" now and compiling that to Wasm? Is that acceptable from FedRAMP perspective?
What's the strategy with respect to cryptographic primitives in the ABI?
Envoy currently exposes
verify_signatureas a foreign function because some customers need FIPS certification.Do we recommend using boringssl "update stream" now and compiling that to Wasm? Is that acceptable from FedRAMP perspective?