[
https://issues.apache.org/jira/browse/SPARK-3542?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Patrick Wendell updated SPARK-3542:
-----------------------------------
Component/s: Spark Core
> If spark.authenticate.secret is set it's transferred in plain text
> ------------------------------------------------------------------
>
> Key: SPARK-3542
> URL: https://issues.apache.org/jira/browse/SPARK-3542
> Project: Spark
> Issue Type: Bug
> Components: Spark Core
> Affects Versions: 1.1.0
> Reporter: James Livingston
>
> It is already noted in the SecurityManager API docs but when using the Akka
> communication protocol, SSL is not currently supported and credentials can
> (and often are) passed in plaintext.
> Using one of the examples, you can add this and see "password" sent in
> plaintext via the akka.tcp protocol:
> conf.set("spark.authenticate", "true")
> conf.set("spark.authenticate.secret", "password")
> It's obviously known, but worth having a jira to track.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org
For additional commands, e-mail: issues-h...@spark.apache.org
