Discovered node are added with http:// URLs by default, which is bad considering users can enable authentication, and when using HTTP the credentials (username + password) are transmitted in clear text over the network. So even if we don't care about privacy, the security of the systems will get compromised quite fast. Jest allows to configure that through builder.defaultSchemeForDiscoveredNodes(String). We should add a configuration property that we would map to this method. Note that it's the same with the official REST client discovery: the scheme is HTTP by default and cannot be discovered automatically. |