Alexey Serbin has posted comments on this change.

Change subject: security: initial work on token creation and verification
......................................................................


Patch Set 2:

(1 comment)

http://gerrit.cloudera.org:8080/#/c/5796/2/src/kudu/security/token_verifier.cc
File src/kudu/security/token_verifier.cc:

PS2, Line 60:     // Sanity check the key.
            :     CHECK(!pb.has_private_key_der());
> In general aren't we sort of assuming that core files are going to have sen
Yep, of course we assume the core files are going to have sensitive data.  My 
point was: splitting that structure/message would beneficial from this side as 
well -- no need to perform such CHECKs, etc.

Thank you for the link -- will take a look.


-- 
To view, visit http://gerrit.cloudera.org:8080/5796
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: Iaf53ae50082d69028315952ac0732af6a83ffdbe
Gerrit-PatchSet: 2
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Todd Lipcon <[email protected]>
Gerrit-Reviewer: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Dan Burkert <[email protected]>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Tidy Bot
Gerrit-Reviewer: Todd Lipcon <[email protected]>
Gerrit-HasComments: Yes

Reply via email to