Skip to content
This repository was archived by the owner on Apr 1, 2024. It is now read-only.
This repository was archived by the owner on Apr 1, 2024. It is now read-only.

PR-20268: [feat] Enable hostname verification by default #5831

@streamnativebot

Description

@streamnativebot

url: apache#20268

PIP: This will require a PIP. It is a draft for now while I get tests passing.

Motivation

It is recommended to use hostname verification in most use cases for TLS. In order to have more secure defaults, I propose that we enable TLS hostname verification by default.

This change will not affect any users that do not have TLS enabled. It will only be a breaking change for users that want to use TLS with hostname verification disabled.

Modifications

  • Update all clients to enable hostname verification by default.

Verifying this change

This is a trivial change from a configuration perspective. I expect many tests will fail though, so those will also verify the changes.

Does this pull request potentially affect one of the following parts:

  • The default values of configurations

Documentation

  • doc-required

Matching PR in forked repository

PR in forked repository: michaeljmarshall#44

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions