← Back to team overview

openstack team mailing list archive

  1. openstack team
  2. Mailing list archive
  3. Message #19030

Potential security issue with CHAP

  Thread Previous • Date Previous • • Thread Next 
Hi all,
Currently, CHAP secrets are managed by Cinder, and passed to Nova for use
when attaching volumes.  This means that unless the communication is
encrypted, or a separate trusted network is used, CHAP secrets can be
sniffed on the wire.
Opinions?

Thanks,
Avishay

Follow ups

  Thread Previous • Date Previous • • Thread Next