18:37:15 GMT <machty> I understand that Redis is almost certainly not going to get native SSL support, but could someone help me understand this comment? https://github.com/antirez/redis/issues/2178#issuecomment-65162770
18:37:48 GMT <machty> i'm familiar with stunnel; i'm just wondering how native TLS/SSL support would eliminate operational overhead surrounding stunnel
18:38:37 GMT <machty> with SSL you'd still have to deal with annual certificate rotation...
18:39:15 GMT <machty> what exactly is different about the stunnel approach?
19:02:16 GMT <minus> with stunnel you have to deal with additional port mappings, i guess
19:02:45 GMT <minus> not sure why people don't just use a VPN, that is the same overhead as direct TLS support imho
21:37:02 GMT <zpojqwfe1wfhiunz> sometimes the added headache of private subnets is enough to put you off, esp in a larger cloud environment
21:38:46 GMT <minus> well, you do need /some/ kind of private network between your shit, it's not something you run over the internet, not even with TLS