[jira] [Created] (HDFS-13654) The default secret signature for httpfs is "hadoop httpfs secret", This should be a random string for better security.

["Pulkit Bhardwaj (JIRA)" <ji...@apache.org>]

Pulkit Bhardwaj created HDFS-13654:
--------------------------------------

             Summary: The default secret signature for httpfs is "hadoop httpfs secret", This should be a random string for better security. 
                 Key: HDFS-13654
                 URL: https://issues.apache.org/jira/browse/HDFS-13654
             Project: Hadoop HDFS
          Issue Type: Improvement
          Components: httpfs
            Reporter: Pulkit Bhardwaj


{code:java}
curl -s https://raw.githubusercontent.com/apache/hadoop/trunk/hadoop-hdfs-project/hadoop-hdfs-httpfs/src/main/conf/httpfs-signature.secret 
hadoop httpfs secret{code}
 

The "secret" is a known string, it is better to keep this a random string so that it is not well known.

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-dev-help@hadoop.apache.org