2 ms·
http://docs.saltstack.org/en/latest/topics/index.html http://docs.saltstack.org/en/latest/topics/index.html """ Salt takes advantage of a number of technologie
by kbutler 14y ago
http://docs.saltstack.org/en/latest/topics/index.html http://docs.saltstack.org/en/latest/topics/index.html
"""
Salt takes advantage of a number of technologies and techniques. The networking layer is built with the excellent ZeroMQ networking library, so the Salt daemon includes a viable and transparent AMQ broker. Salt uses public keys for authentication with the master daemon, then uses faster AES encryption for payload communication; authentication and encryption are integral to Salt. Salt takes advantage of communication via msgpack, enabling fast and light network traffic.
"""
- lvh 14y agoThat explains the feature set, but it doesn't quite explain why it doesn't use TLS; TLS also starts with public key cryptosystems and then generates signing and symmetric encryption keys, oftentimes using precisely the same base algorithms (AES-256 and HMAC-SHA256). (Also, msgpack seems completely orthogonal to this issue.)
- e12e 14y agoIt's not really as easy as "use X library". As another commenter mentioned - using stunnel might be better than "rolling your own" based on well tested primitives, but "just using openssl" isn't necessarily a good solution, see eg this recent discussion: http://lists.randombit.net/pipermail/cryptography/2012-October/003376.html http://lists.randombit.net/pipermail/cryptography/2012-Octob...