GitHub user aglinxinyuan added a comment to the discussion: Refactor: 
Decoupling Direct Database Connection From ComputingUnitMaster & 
ComputingUnitWorker

Why is exposing the physical plan to the frontend considered dangerous? Is a 
resolved file URL actually sensitive, and if so, what specific information or 
risks does it expose?

I think it’s important that we understand the reasoning behind each design 
decision rather than relying on a general feeling that exposing the physical 
plan is dangerous. If there are concrete security, privacy, or architectural 
concerns, we should identify and document them so we can make informed 
trade-offs. We can look at each information physical plan contains, and encrypt 
the sensitive one instead encrypt the whole physical plan.

GitHub link: 
https://github.com/apache/texera/discussions/5295#discussioncomment-17118765

----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to: [email protected]

Reply via email to