[I] [Enhancement] Change the compare method for acl signature to improve the security. [rocketmq]

["dingshuangxi888 (via GitHub)" <gi...@apache.org>]

dingshuangxi888 opened a new issue, #8882:
URL: https://github.com/apache/rocketmq/issues/8882

   ### Before Creating the Enhancement Request
   
   - [X] I have confirmed that this should be classified as an enhancement rather than a bug/feature.
   
   
   ### Summary
   
   Change the compare method for acl signature to improve the security.
   
   ### Motivation
   
   Change the compare method for acl signature to improve the security.
   
   ### Describe the Solution You'd Like
   
   Use the MessageDigest.isEqual method instead of the StringUtils.equals method.
   
   
   
   ### Describe Alternatives You've Considered
   
   MessageDigest.isEqual is more secure in extreme scenarios.
   
   ### Additional Context
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] [Enhancement] Change the compare method for acl signature to improve the security. [rocketmq]

["RongtongJin (via GitHub)" <gi...@apache.org>]

RongtongJin closed issue #8882: [Enhancement] Change the compare method for acl signature to improve the security.
URL: https://github.com/apache/rocketmq/issues/8882


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org