NoSQL doesn't mean no security. A production database engine has to protect its data. The trick is to make the auth framework fast enough that it doesn't adversely affect performance and robust enough that an application requesting data doesn't have to jump through hoops to get it.
-----Original Message----- From: Jake Luciani [mailto:jak...@gmail.com] Sent: December 2, 2009 4:00 PM To: cassandra-user@incubator.apache.org Subject: Re: Cassandra access control +1 this is nosql afterall. Sent from my iPhone On Dec 2, 2009, at 3:54 PM, Mark Robson <mar...@gmail.com> wrote: > How about we make authentication optional, and have the protocol > being stateful only if you want to authenticate? > > That way we don't break backwards compatibility or introduce extra > complexity for people who don't need it. > > Mark