Re: [DISCUSS] Support authentication in Celeborn

2023-09-18 Thread Mridul Muralidharan
To add to what Chandni mentioned, using self-signed certificates and trusting them is another (though less secure) practice some deployments leverage. This ensures encryption over the wire, but does not allow for clients to validate identity of the Celeborn server components (so potentially

Re: [DISCUSS] Support authentication in Celeborn

2023-09-18 Thread Chandni Singh
Hi Zhongqiang, Yes, you are right. TLS implementation relies on digital certificates which are usually obtained from a trusted CA. In my experience, many organizations establish their own internal CAs to issue certificates for their internal networks, thus acting as trusted issuers for various

Re:[DISCUSS] Support authentication in Celeborn

2023-09-18 Thread Zhongqiang Chen
Hi Chandni, I have a question about how to implement TLS handshake and how to obtain the certificate? Based on my understanding, TLS implementation generally relies on digital certificates which are obtained from a trusted certificate authority (CA). It requires some money to obtain a CA