[
https://issues.apache.org/jira/browse/BEAM-9564?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ismaël Mejía updated BEAM-9564:
-------------------------------
Description: The option MongoDBIO.withIgnoreSSLCertificate and
withSSLInvalidHostNameAllowedslInvalidHostNameAllowed() are insecure by design.
We should not encourage users to be able to use them so better to remove these
options. (was: The option MongoDBIO.withIgnoreSSLCertificate is insecure by
design. We should not encourage this behavior so better to remove this option.
I thought this was used only for tests but it does not seem to be the case so
there is not even a valid case to keep it.)
> Remove insecure ssl options from MongoDBIO
> ------------------------------------------
>
> Key: BEAM-9564
> URL: https://issues.apache.org/jira/browse/BEAM-9564
> Project: Beam
> Issue Type: Improvement
> Components: io-java-mongodb
> Affects Versions: 2.21.0
> Reporter: Ismaël Mejía
> Assignee: Ismaël Mejía
> Priority: Critical
> Labels: backward-incompatible
>
> The option MongoDBIO.withIgnoreSSLCertificate and
> withSSLInvalidHostNameAllowedslInvalidHostNameAllowed() are insecure by
> design. We should not encourage users to be able to use them so better to
> remove these options.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
