transportsecurity

func CheckRedirect ¶

func CheckRedirect(req *http.Request, via []*http.Request) error

CheckRedirect forbids downgrades even when local development permits an initial HTTP endpoint.

func HTTPTransport ¶

func HTTPTransport(base http.RoundTripper, allowPlaintext bool) http.RoundTripper

HTTPTransport also checks dynamically constructed execution URLs before any credentials reach the network.

func PlaintextAllowed ¶

func PlaintextAllowed(ctx context.Context) bool

func TLS ¶

func TLS(host string) *tls.Config

TLS retains the configured hostname when a destination policy pins the socket to an IP.

func ValidateURL ¶

func ValidateURL(target *url.URL, allowPlaintext bool) error

func WithPlaintext ¶

func WithPlaintext(ctx context.Context) context.Context

WithPlaintext permits local development fixtures. Deployment validation must reject this policy outside local profiles.