diff --git a/Security-Overview.md b/Security-Overview.md index ba9234c..37a7158 100644 --- a/Security-Overview.md +++ b/Security-Overview.md @@ -13,10 +13,10 @@ Server | Service | Note master | gRPC | secured by mutual TLS volume | gRPC | secured by mutual TLS filer | gRPC | secured by mutual TLS -master | http REST | "weed master -disableHttp", disable http operations, only gRPC operations are allowed. -filer | http REST | "weed filer -disableHttp", disable http operations, only gRPC operations are allowed. -volume | http REST write | set `jwt.signing.key` in `security.toml` in master and volume servers to check token for write operations -volume | http REST read | unprotected, but url is not guessable +master | http | "weed master -disableHttp", disable http operations, only gRPC operations are allowed. +filer | http | "weed filer -disableHttp", disable http operations, only gRPC operations are allowed. +volume | http write | set `jwt.signing.key` in `security.toml` in master and volume servers to check token for write operations +volume | http read | unprotected, but url is not guessable # Generate `security.toml` file