Re: Protecting a cluster from malicious membership

2019-02-11 Thread Keiichi Fujino
2019年2月12日(火) 1:44 Christopher Schultz : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Mark, > > On 2/11/19 03:49, Mark Thomas wrote: > > On 10/02/2019 14:37, Christopher Schultz wrote: > >> All, > >> > >> I'm looking at the security of Tomcat's Clustering components, > >> and I think

Re: Protecting a cluster from malicious membership

2019-02-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 2/11/19 03:49, Mark Thomas wrote: > On 10/02/2019 14:37, Christopher Schultz wrote: >> All, >> >> I'm looking at the security of Tomcat's Clustering components, >> and I think that the following are true. Please let me know if >> anything

Re: Protecting a cluster from malicious membership

2019-02-11 Thread Mark Thomas
On 10/02/2019 14:37, Christopher Schultz wrote: > All, > > I'm looking at the security of Tomcat's Clustering components, and I > think that the following are true. Please let me know if anything in > here is inaccurate: > > 1. a. Default membership uses multicast >b. Multicast (UDP) can't

Protecting a cluster from malicious membership

2019-02-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I'm looking at the security of Tomcat's Clustering components, and I think that the following are true. Please let me know if anything in here is inaccurate: 1. a. Default membership uses multicast b. Multicast (UDP) can't be authenticated