Re: Connecting cluster with different cookies
Raimo Niskanen <[email protected]>
| Newsgroups | gmane.comp.lang.erlang.general |
|---|---|
| Message-ID | <[email protected]> |
On Mon, Aug 09, 2021 at 06:34:02PM +0200, Łukasz Niemier wrote: > > So, what says the Community? How important feature is it > > to be able to connect nodes with different cookies? > > I never had need for that, but I think that it could have some uses in the past when there was no TLS connection and cookie was only "protection". Nowadays it is IMHO pointless and serves only as a way to prevent accidental connections to different cluster. In that form cookie at all is loosing it's raison d'être. I think, that unless there is any large player that extensively is using this feature and is willing to provide resources for maintenance of such, then we should drop it. > > I would even say, that maybe we should consider dropping the cookies in general, and instead move such feature to another layer like mutual TLS? I think non-encrypted distribution over a safe network still has its use, and that the cookies in this case as you say helps protect against accidental connections to the wrong cluster. > > -- > > Łukasz Niemier > [email protected] > -- / Raimo Niskanen, Erlang/OTP, Ericsson AB