Details
-
Improvement
-
Status: Resolved
-
Not specified
-
Resolution: Duplicate
-
None
-
None
-
None
Description
To avoid the problem we currently have of sending plain text or weakly encrypted passwords from Dali clients to Dali when authenticating access to files/workunits.
We should add the ability for Dali clients/Dali to support securely connectivity and a Dali configuration only to only accept secure connections.
Ideally the SSL connectivity would be implemented such that components could switch to using it relatively seamlessly, e.g. a implementation of ISocket.
In fact we already have ISecureSocket which is a derivative, however it is only partially implemented.
For Dali connectivity, MP would need to support SSL also.
Attachments
Issue Links
- duplicates
-
HPCC-10024 Encrypt network traffic between all MP clients and Thor sort sockets
-
- Resolved
-
- relates to
-
HPCC-12140 Encryption of data in transit and at rest
-
- Accepted
-