Clarify documentation about replication traffic. (#13656)

clokep · web-flow · commit e761e8b475e2 · 2022-08-30T12:21:19.000Z
It can be authenticated with the worker_replication_secret setting,
but is always unencrypted.
diff --git a/changelog.d/13656.doc b/changelog.d/13656.doc
@@ -0,0 +1 @@
+Clarify documentation that HTTP replication traffic can be protected with a shared secret.
diff --git a/docs/workers.md b/docs/workers.md
@@ -120,7 +120,10 @@ redis:
 See the sample config for the full documentation of each option.
 
 Under **no circumstances** should the replication listener be exposed to the
-public internet; it has no authentication and is unencrypted.
+public internet; replication traffic is:
+
+* always unencrypted
+* unauthenticated, unless `worker_replication_secret` is configured
 
 
 ### Worker configuration

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+Clarify documentation that HTTP replication traffic can be protected with a shared secret.`