Skip to content
This repository was archived by the owner on Apr 1, 2024. It is now read-only.
This repository was archived by the owner on Apr 1, 2024. It is now read-only.

PR-20268: [feat] Enable hostname verification by default #5831

Description

@streamnativebot

url: apache#20268

PIP: This will require a PIP. It is a draft for now while I get tests passing.

Motivation

It is recommended to use hostname verification in most use cases for TLS. In order to have more secure defaults, I propose that we enable TLS hostname verification by default.

This change will not affect any users that do not have TLS enabled. It will only be a breaking change for users that want to use TLS with hostname verification disabled.

Modifications

  • Update all clients to enable hostname verification by default.

Verifying this change

This is a trivial change from a configuration perspective. I expect many tests will fail though, so those will also verify the changes.

Does this pull request potentially affect one of the following parts:

  • The default values of configurations

Documentation

  • doc-required

Matching PR in forked repository

PR in forked repository: michaeljmarshall#44

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions