Advertize adds a message digest even if security key is not configured ---------------------------------------------------------------------- Key: MODCLUSTER-338 URL: https://issues.jboss.org/browse/MODCLUSTER-338 Project: mod_cluster Issue Type: Bug Affects Versions: 1.2.4.Final Reporter: Radoslav Husar Assignee: Radoslav Husar Fix For: 1.3.0.Alpha1 As wireshark hints, the message digest is always included in the message even if the advertise security key is not configured. This would not be such a problem if the salt actually used wouldn't be random bits from the memory. This renders the digest completely useless since it can never be verified.