Re: Security Questions

2011-11-11 Thread Alexander Shorin
On Fri, Nov 11, 2011 at 8:54 PM, Ido Ran wrote: > About securing replication, SSL only solve confidentiality, not authorization. > How do I go about making sure only authenticated party can replicate? > > Thank you You may gain auth by client SSL certificate. -- ,,,^..^,,, > > ב-10 בנוב 2011, ב

Re: Security Questions

2011-11-11 Thread Ido Ran
About securing replication, SSL only solve confidentiality, not authorization. How do I go about making sure only authenticated party can replicate? Thank you ב-10 בנוב 2011, בשעה 21:47, Alexander Shorin כתב/ה: > On Thu, Nov 10, 2011 at 7:59 PM, Ido Ran wrote: >> 1. Does couch_httpd_oauth m

Re: Security Questions

2011-11-10 Thread Ido Ran
Hi, Thanks for the answer. On Thu, Nov 10, 2011 at 9:47 PM, Alexander Shorin wrote: > On Thu, Nov 10, 2011 at 7:59 PM, Ido Ran wrote: > > 1. Does couch_httpd_oauth means CouchDB support OAuth authentication as > is, > > without reverse proxy or anything else? > > 2. How can I secure the replic

Re: Security Questions

2011-11-10 Thread Alexander Shorin
On Thu, Nov 10, 2011 at 7:59 PM, Ido Ran wrote: > 1. Does couch_httpd_oauth means CouchDB support OAuth authentication as is, > without reverse proxy or anything else? > 2. How can I secure the replication between two couches? > 1. Yes. 2. SSL, native or via proxy like nginx. -- ,,,^..^,,,

Security Questions

2011-11-10 Thread Ido Ran
1. Does couch_httpd_oauth means CouchDB support OAuth authentication as is, without reverse proxy or anything else? 2. How can I secure the replication between two couches? Thank you, Ido