Marcelo Vanzin created SPARK-19139:
--------------------------------------
Summary: AES-based authentication mechanism for Spark
Key: SPARK-19139
URL: https://issues.apache.org/jira/browse/SPARK-19139
Project: Spark
Issue Type: New Feature
Components: Spark Core
Affects Versions: 2.2.0
Reporter: Marcelo Vanzin
In SPARK-13331, support for AES encryption was added to the Spark network
library. But the authentication of different Spark processes is still performed
using SASL's DIGEST-MD5 mechanism. That means the authentication part is the
weakest link; since the AES keys are currently encrypted using 3des (strongest
cipher supported by SASL), Spark can't really claim to provide the full
benefits of using AES for encryption.
We should add a new auth protocol that doesn't need these disclaimers.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
