Proposal - encrypted cache
by Sebastian Laskawiec
Hey!
A while ago I stumbled upon [1]. The article talks about encrypting data
before they reach the server, so that the server doesn't know how to
decrypt it. This makes the data more secure.
The idea is definitely not new and I have been asked about something
similar several times during local JUGs meetups (in my area there are lots
of payments organizations who might be interested in this).
Of course, this can be easily done inside an app, so that it encrypts the
data and passes a byte array to the Hot Rod Client. I'm just thinking about
making it a bit easier and adding a default encryption/decryption mechanism
to the Hot Rod client.
What do you think? Does it make sense?
Thanks
Sebastian
[1] https://eprint.iacr.org/2016/920.pdf
6 years, 6 months
Hot Rod secured by default
by Tristan Tarrant
Dear all,
after a mini chat on IRC, I wanted to bring this to everybody's attention.
We should make the Hot Rod endpoint require authentication in the
out-of-the-box configuration.
The proposal is to enable the PLAIN (or, preferably, DIGEST) SASL
mechanism against the ApplicationRealm and require users to run the
add-user script.
This would achieve two goals:
- secure out-of-the-box configuration, which is always a good idea
- access to the "protected" schema and script caches which is prevented
when not on loopback on non-authenticated endpoints.
Tristan
--
Tristan Tarrant
Infinispan Lead
JBoss, a division of Red Hat
6 years, 10 months
Protostream marshaller support for optional fields
by Galder Zamarreño
Hey Adrian,
Quick q: how is a protostream marshaller supposed to deal with optional fields?
I don't see any writer methods that deal with those... is it up to the user to put something on the wire to decide at read time whether the optional field follows or not?
Cheers,
--
Galder Zamarreño
Infinispan, Red Hat
7 years, 2 months
JDK 8u162 b01 Early Access is available on jdk.java.net
by Rory O'Donnell
Hi Galder,
*JDK 8u162 Early Access* build 01 is available at : - jdk.java.net/8/
<http://jdk.java.net/8/>
Information and schedules specific to OpenJDK 8u162 release are listed
here <http://openjdk.java.net/projects/jdk8u/releases/8u162.html>
<http://openjdk.java.net/projects/jdk8u/releases/8u162.html>
*JRE and JDK Cryptographic Roadmap* has been updated the details are
here <https://www.java.com/en/jre-jdk-cryptoroadmap.html>
**
*JavaOne2017* took place October 1 to 5, 2017 at San Francisco.
If you were unable to attend the event or missed some talks, below you
will find links to keynotes from last week
that have been posted for on-demand replay:
* JavaOne Opening Keynote (Monday, Oct. 2):
o https://www.oracle.com/javaone/on-demand.html?bcid=5596229112001
* Oracle Code Keynote (Tuesday, Oct. 3):
o https://www.oracle.com/javaone/on-demand.html?bcid=5600354378001
* JavaOne Community Keynote (Thursday, Oct. 5):
o https://www.oracle.com/javaone/on-demand.html?bcid=5604479599001
Regards,
Rory
--
Rgds,Rory O'Donnell
Quality Engineering Manager
Oracle EMEA , Dublin, Ireland
7 years, 2 months
Replacing IRC
by Tristan Tarrant
Dear all,
last week we discussed the possibility of abandoning IRC in favour of a
more modern alternative.
Hard requirements:
- free (as in beer)
- hosted (we don't want to maintain it ourselves)
- multi-platform client: native (Linux, MacOS, Windows), browser
- persistent logs
- distinction between channel operators and normal users
- guest access (without the need for registration)
- integration with Jira for issue lookup
- integration with GitHub for PR lookup
- IRC bridge (so that users can connect with an IRC client)
- ability to export data in case we want to move somewhere else
- on-the-fly room creation for mini-teams
Optionals:
- Free (as in freedom)
- offline notifications (i.e. see if I was notified while away)
- mobile client: Android and iOS
- proper native client (as most Electron clients are quite fat)
- chat logs accessible without a client (it is acceptable if this is
achieved via a bot)
- integration with Jenkins for CI status
- XMPP bridge (so that users can connect with an XMPP client)
Not needed:
- file sharing, audio/video
Here is a list of candidates:
- IRC (i.e. no change)
- Slack
- Stride (Atlassian's upcoming replacement for HipChat)
- Matrix (Matrix.org, unfortunately with funding issues)
- Gitter
- Discord
- Rocket.chat (unfortunately hosting is paid)
If you have any other suggestions/recommendations, they are more than
welcome.
Tristan
--
Tristan Tarrant
Infinispan Lead
JBoss, a division of Red Hat
7 years, 2 months
