ripplehang commented on PR #43601:
URL: https://github.com/apache/arrow/pull/43601#issuecomment-2327742982

   > If we accept raw key instead of base64 encoded key, we don't need base64 
encoded key validation in `CalculateSSECKeyMD5()`, right? If so, I like raw key 
approach.
   > 
   > > Meanwhile, during the integration between the arrow and my own project, 
using the base64encoded key may be a little more easy for 
integration/debug/troubleshooting purpose.
   > 
   > BTW, why is this? Is it simply because your project already has base64 
encoded key not raw key?
   
   @kou readable ascii string may has some benefits, some system may needs to 
use the environment variable or even the Registry/Configure fille to configure 
the key, though the usage for the configure fie to store such a key is NOT the 
security practice, there do has the possibility to use the environment variable 
to store such information.
   cc @pitrou 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscr...@arrow.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to