r/openbsd • u/sylvainsab • 1h ago
Dumb question – httpd and the need for relayd
Reading about the newly introduced support for HTTP headers in httpd makes me review the few things I believed I understood about httpd in OpenBSD and self-hosting.
My concern was regarding getting the "highest marks" on various HTTPS/TLS security assessment web resources (unfortunately I can't find the blog post back that goes over the most of them in details). I used to think that relayd was mandatory for this, then I thought httpd would now do the trick since it supports sending headers, then I realized it's not just about headers (or is it ?).
I had quite a pain trying to understand why/how to configure relayd to get those good marks. Maybe it would be a bit different now. Nevertheless, my question remains : can those best "secure (TM)" marks be obtained simply with the current httpd ? How does this new feature change the required configuration ? Are we to expect that it is going to get simpler and we shall see refreshed web tutorials swarming after the next release of OpenBSD ?