docs: update protocol + security notes

2026-01-20 12:20:20 +00:00
parent 409a16060b
commit 06c17a333e
7 changed files with 28 additions and 7 deletions
--- a/docs/gateway/security.md
+++ b/docs/gateway/security.md
@@ -267,6 +267,7 @@ Doctor can generate one for you: `clawdbot doctor --generate-gateway-token`.

 Note: `gateway.remote.token` is **only** for remote CLI calls; it does not
 protect local WS access.
+Optional: pin remote TLS with `gateway.remote.tlsFingerprint` when using `wss://`.

 Auth modes:
 - `gateway.auth.mode: "token"`: shared bearer token (recommended for most setups).