>Having basic authentication in Elasticsearch would be the pointless equivalent. Instead of that they could implement a PAKE. That would provide security with

>Having basic authentication in Elasticsearch would be the pointless equivalent. Instead of that they could implement a PAKE. That would provide security with no certificates.