Attila Sasvari created KAFKA-7691:
-------------------------------------
Summary: Encypt-then-MAC Delegation token metadata
Key: KAFKA-7691
URL: https://issues.apache.org/jira/browse/KAFKA-7691
Project: Kafka
Issue Type: Improvement
Reporter: Attila Sasvari
Currently delegation token metadata is stored unencrypted in Zookeeper.
Kafka brokers could implement a strategy called
[Encrypt-then-MAC|https://en.wikipedia.org/wiki/Authenticated_encryption#Encrypt-then-MAC_(EtM)]
to encrypt sensitive metadata information about delegation tokens.
For more details, please read
https://cwiki.apache.org/confluence/display/KAFKA/KIP-395%3A+Encypt-then-MAC+Delegation+token+metadata
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)