[
https://issues.apache.org/jira/browse/ZOOKEEPER-5050?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18089587#comment-18089587
]
Piotr Karwasz commented on ZOOKEEPER-5050:
------------------------------------------
Hi Andor,
Since you are already touching documentation, might I suggest adding a
*Security model* (or *Threat model*) section to {{security.html}}? It would
centralize a few assumptions that are obvious to the ZooKeeper team but rarely
so to external security researchers:
* *Secure-by-default posture.* State explicitly whether ZooKeeper is meant to
be secure out of the box, or whether it must be hardened before deployment. It
sounds almost too obvious to write down, but without it you will keep getting
reports asking why ZooKeeper binds to all interfaces instead of {{localhost}},
or why it serves plain {{HTTP}} rather than {{HTTPS}} by default.
* *Reporting scope.* Clarify what is in scope and out of scope, in particular
{{zookeeper-contrib}} and any other code that is *not* published to Maven
Central. Without this, you might end up with something like COMPRESS-725.
Jarek shared a skill he uses to generate threat models. If you would like to
pre-generate a draft with an AI agent from public data and your own answers, it
is here: https://gist.github.com/potiuk/da14a826283038ddfe38cc9fe6310573
> Enhance documentation of AdminServer to highlight security considerations
> -------------------------------------------------------------------------
>
> Key: ZOOKEEPER-5050
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-5050
> Project: ZooKeeper
> Issue Type: Improvement
> Components: documentation, server
> Affects Versions: 3.10.0, 3.9.5, 3.8.6
> Reporter: Andor Molnar
> Priority: Major
> Labels: pull-request-available
> Time Spent: 1h 10m
> Remaining Estimate: 0h
>
> Add new section to highlight the security considerations that administrators
> should follow when deploying ZooKeeper with Admin Server enabled.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
