This issue was reported a long time ago but was just forwarded to me by lmurthy today.

https://bugzilla.redhat.com/show_bug.cgi?id=1903910

I believe that our docs may cover the customer use case now, but we should check this with markusthoemmes rhn-support-knakayam / Serving team to make sure:

https://docs.openshift.com/container-platform/4.6/serverless/knative_serving/serverless-ossm-tls-with-kourier.html

It seems to me as if the user wants to use only Kourier and not Istio (SM), so I'm not sure if that's a solution we intend to provide of if it's still a hard dependency on SM.

I think one possible improvement that could be made to our docs is to add a Security docs section instead to improve the findability of this type of content.