回复: Digest auth with classic TCP transport

2018-09-27 Thread liuxuelong
-- 海纳百川,有容乃大;壁立千仞,无欲则刚 -- 原始邮件 -- 发件人: "Michael Han"; 发送时间: 2018年9月28日(星期五) 凌晨4:25 收件人: "user"; 主题: Re: Digest auth with classic TCP transport >> I have not found any evidence that Zookeeper server nor (Ja

Re: Digest auth with classic TCP transport

2018-09-27 Thread Michael Han
> > >>>>> if you're prevented from implementing SSL why not use TLSv1.3? > > >>>> > > >>>> > > >>>> I have not found any evidence that Zookeeper server nor (Java) > client > > >>>> supports TLS in ve

Re: Digest auth with classic TCP transport

2018-09-27 Thread Andor Molnar
t;> > >>>>> if you're prevented from implementing SSL why not use TLSv1.3? > >>>> > >>>> > >>>> I have not found any evidence that Zookeeper server nor (Java) client > >>>> supports TLS in version 3.4.13. Please poin

Re: Digest auth with classic TCP transport

2018-09-27 Thread Jan Høydahl
ts TLS in version 3.4.13. Please point me to some docs or >> tutorial. >>>> We don't want to fork Zookeeper to implement this stuff ourselves :) >>>> >>>> -- >>>> Jan Høydahl, search solution architect >>>> Cominvent AS - www.

Re: Digest auth with classic TCP transport

2018-09-27 Thread Andor Molnar
nt this stuff ourselves :) > >> > >> -- > >> Jan Høydahl, search solution architect > >> Cominvent AS - www.cominvent.com > >> > >>> 27. sep. 2018 kl. 15:17 skrev Martin Gainty : > >>> > >>> > >>>

Re: Digest auth with classic TCP transport

2018-09-27 Thread Jan Høydahl
keeper to implement this stuff ourselves :) >> >> -- >> Jan Høydahl, search solution architect >> Cominvent AS - www.cominvent.com >> >>> 27. sep. 2018 kl. 15:17 skrev Martin Gainty : >>> >>> >>> ______

Re: Digest auth with classic TCP transport

2018-09-27 Thread Andor Molnar
-- > Jan Høydahl, search solution architect > Cominvent AS - www.cominvent.com > > > 27. sep. 2018 kl. 15:17 skrev Martin Gainty : > > > > > > > > From: Jan Høydahl > > Sent: Thursday, September 27, 2018 5:12 AM > >

Re: Digest auth with classic TCP transport

2018-09-27 Thread Jan Høydahl
es :) -- Jan Høydahl, search solution architect Cominvent AS - www.cominvent.com > 27. sep. 2018 kl. 15:17 skrev Martin Gainty : > > > > From: Jan Høydahl > Sent: Thursday, September 27, 2018 5:12 AM > To: user@zookeeper.apache.org >

Re: Digest auth with classic TCP transport

2018-09-27 Thread Martin Gainty
From: Jan Høydahl Sent: Thursday, September 27, 2018 5:12 AM To: user@zookeeper.apache.org Subject: Digest auth with classic TCP transport Hi We use ZK 3.4.13, and unfortunately cannot use Netty transport and SSL. We plan to use digest authentication and

Digest auth with classic TCP transport

2018-09-27 Thread Jan Høydahl
Hi We use ZK 3.4.13, and unfortunately cannot use Netty transport and SSL. We plan to use digest authentication and Zookeeper ACL protection. Question is, since we cannot use SSL, is there some other way to make sure the user credentials are not sniffed over the network and thus let an attacker