anchor.diff:            - cert2.pem
   ----
   
  -If the Spring Cloud Gateway is not provisioned with trusted certificates the default trust store is used (which can be overriden with system property javax.net.ssl.trustStore).
  +If the Spring Cloud Gateway is not provisioned with trusted certificates the default trust store is used (which can be overridden with system property javax.net.ssl.trustStore).
   
   === TLS Handshake
   
  -The Gateway maintains a client pool that it uses to route to backends. When communicating over https the client initiates a TLS handshake. A number of timeouts are assoicated with this handshake. These timeouts can be configured (defaults shown):
  +The Gateway maintains a client pool that it uses to route to backends. When communicating over https the client initiates a TLS handshake. A number of timeouts are associated with this handshake. These timeouts can be configured (defaults shown):
   
   .application.yml
   [source,yaml]
  
positive.code: === SecureHeaders GatewayFilter Factory
  The SecureHeaders GatewayFilter Factory adds a number of headers to the response at the reccomendation from https://blog.appcanary.com/2017/http-security-headers.html[this blog post].
  
  .The following headers are added (allong with default values):
   * `X-Xss-Protection:1; mode=block`
   * `Strict-Transport-Security:max-age=631138519`
   * `X-Frame-Options:DENY`
  
negative.code: In either case, the HTTP status of the response will be set to 401.
  
  === StripPrefix GatewayFilter Factory
  The StripPrefix GatewayFilter Factory takes one parameter, `parts`.  The `parts` parameter indicated the number of parts in the path to strip from the request before sending it downstream.
  
  .application.yml
  [source,yaml]
  