Will FaunaDB Add a Configurable Custom CA Trust Option for Private PKI?

FaunaDB’s API endpoints require TLS 1.2+ and present a server certificate signed by a public CA. The official drivers rely on the underlying HTTP library’s default trust store and do not expose a parameter to supply an alternate CA bundle, nor does the dashboard provide a way to upload custom root certificates. This leaves users who operate behind internal PKI or who need certificate pinning without a documented method to extend trust beyond the system store.

Given the current limitation, the unresolved decision is whether FaunaDB will introduce a configurable custom CA trust store or certificate pinning mechanism for its HTTP and GraphQL endpoints. Clarifying this would help teams plan for private‑CA environments and evaluate alternative approaches such as side‑car proxies.

Is there a planned timeline for adding a custom CA upload option in the FaunaDB dashboard? Will the Node, Python, Go, and Java drivers receive a TLS trust‑bundle configuration parameter? Does FaunaDB consider implementing certificate pinning as an alternative to a configurable trust store?