[williamallthing]

Just published this earlier this morning. Would love your comments and corrections. TLS is a huge topic and I'm sure I got something wrong in here.

[nextaccountic]

What about traffic that isn't HTTP? Does Linkerd helps authenticate that, perhaps by setting up a tunnel?

[williamallthing]

Non-HTTP TCP traffic will be mTLS'd by Linkerd just as well as HTTP traffic is, as long as there's a proxy on both ends of the connection. No tunnel required.