You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@beam.apache.org by "Ahmet Altay (JIRA)" <ji...@apache.org> on 2019/03/11 17:46:00 UTC

[jira] [Updated] (BEAM-6292) PasswordDecrypter: Delay decryption / Avoid serialization

     [ https://issues.apache.org/jira/browse/BEAM-6292?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ahmet Altay updated BEAM-6292:
------------------------------
    Fix Version/s:     (was: 2.11.0)
                   2.12.0

> PasswordDecrypter: Delay decryption / Avoid serialization
> ---------------------------------------------------------
>
>                 Key: BEAM-6292
>                 URL: https://issues.apache.org/jira/browse/BEAM-6292
>             Project: Beam
>          Issue Type: Improvement
>          Components: io-java-cassandra
>            Reporter: Mathieu Blanchard
>            Assignee: Mathieu Blanchard
>            Priority: Minor
>              Labels: triaged
>             Fix For: 2.12.0
>
>          Time Spent: 10h 40m
>  Remaining Estimate: 0h
>
> Currently, the password is decrypted before the serialization of the pipeline and this causes the raw version to be visible to everyone on the staging location.
> To avoid this, we delayed the decryption of the password when connecting to the cluster, which ensures that the raw password is never serialized in the pipeline.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)