ctubbsii edited a comment on issue #646: Do not require a password on the 
truststore JKS
URL: https://github.com/apache/accumulo/pull/646#issuecomment-420794159
 
 
   > Thought it was obvious that's what I was describing. No security, just 
integrity of the JKS.
   
   It wasn't obvious because I was/am confused by your continued phrasing which 
overlooks integrity as a type of security.
   
   > Truststores, in this context, do not contain private material, thus there 
is no need to enforce confidentiality
   
   I agree and said as much myself. Truststores don't need confidentiality. 
They do need integrity. Passphrases provide both, but truststores only need the 
latter.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services

Reply via email to