Attila Sasvari created KAFKA-7691:
-------------------------------------

             Summary: Encypt-then-MAC Delegation token metadata
                 Key: KAFKA-7691
                 URL: https://issues.apache.org/jira/browse/KAFKA-7691
             Project: Kafka
          Issue Type: Improvement
            Reporter: Attila Sasvari


Currently delegation token metadata is stored unencrypted in Zookeeper.

Kafka brokers could implement a strategy called 
[Encrypt-then-MAC|https://en.wikipedia.org/wiki/Authenticated_encryption#Encrypt-then-MAC_(EtM)]
 to encrypt sensitive metadata information about delegation tokens.

For more details, please read 
https://cwiki.apache.org/confluence/display/KAFKA/KIP-395%3A+Encypt-then-MAC+Delegation+token+metadata



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to