Improve security FAQ (#2020)

* Improve security FAQ

* Update non-istio-to-istio.md
This commit is contained in:
Tao Li 2018-07-27 10:56:40 -07:00 committed by istio-bot
parent 8583b62cc7
commit 21a5fb62a7
1 changed files with 3 additions and 1 deletions

View File

@ -3,4 +3,6 @@ title: If mutual TLS is globally enabled, can non-Istio services access Istio se
weight: 30
---
Non-Istio services cannot communicate to Istio services unless they can present a valid certificate, which is less likely to happen.
This is the expected behavior for *mutual TLS*.
This is the expected behavior for *mutual TLS*. However, you can override the
global flag for specific namespaces or services. See
[task](/docs/tasks/security/authn-policy) for more details.