§13. Security

In this chapter

13.1 TLS and cryptography	The only crypto backend is AWS-LC (primitives, TLS 1.3, QUIC), linked statically.
13.2 Authentication	Providers are set in cluster { auth { …
13.3 Secrets and field encryption	secret<T>: Show prints ***; the value does not get into logs and traces; it is serialised only per §9.3; memory is wiped on destruction; reading is s.reveal() (the analyzer makes sure that the result does not leak into a…
13.4 Authorisation and policies	The subject of a policy