3 ms·
How does security work in a system like this. If this is used in a shared hosting system, can a user inject false messages into Serf with for example PHP?
by mjohan 13y ago
How does security work in a system like this. If this is used in a shared hosting system, can a user inject false messages into Serf with for example PHP?
- mitchellh 13y agoYes, they can. In the general case its not an issue because usually your nodes are inaccessible by the public, but if you're using a shared hosting environment, this is entirely possible. We're addressing this in the next release by signing/encrypting gossiped messages. See the roadmap: http://www.serfdom.io/docs/roadmap.html http://www.serfdom.io/docs/roadmap.html