[jira] [Resolved] (SPARK-3542) If spark.authenticate.secret is set it's transferred in plain text

["Sean Owen (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SPARK-3542?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sean Owen resolved SPARK-3542.
------------------------------
    Resolution: Not A Problem

> If spark.authenticate.secret is set it's transferred in plain text
> ------------------------------------------------------------------
>
>                 Key: SPARK-3542
>                 URL: https://issues.apache.org/jira/browse/SPARK-3542
>             Project: Spark
>          Issue Type: Bug
>          Components: Spark Core
>    Affects Versions: 1.1.0
>            Reporter: James Livingston
>
> It is already noted in the SecurityManager API docs but when using the Akka communication protocol, SSL is not currently supported and credentials can (and often are) passed in plaintext.
> Using one of the examples, you can add this and see "password" sent in plaintext via the akka.tcp protocol:
>   conf.set("spark.authenticate", "true")
>   conf.set("spark.authenticate.secret", "password")
> It's obviously known, but worth having a jira to track.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org