Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (nike.apache.org: domain of kxepal@gmail.com designates
 209.85.210.46 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <36E07B7B-DD97-4F03-AD5F-A9210801AA14@gmail.com>
References: 
 <CAKvLi7OR4mQtLfkyBvCuVgViXoSk7DYawXxDV6ggdPH+nsP5Mg@mail.gmail.com>
	<CAHdjipKGZ8gDs-0ApjUjwv0501eHT2psXvDOxAvfqifiF6s60g@mail.gmail.com>
	<36E07B7B-DD97-4F03-AD5F-A9210801AA14@gmail.com>
Date: Fri, 11 Nov 2011 19:57:56 +0300
Message-ID: 
 <CAHdjipJBP1608Xpv4bt12Wt1XcBijCyeU=_8OasT=BLcJwTc9A@mail.gmail.com>
Subject: Re: Security Questions
From: Alexander Shorin <kxepal@gmail.com>
To: user@couchdb.apache.org
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Fri, Nov 11, 2011 at 8:54 PM, Ido Ran <ido.ran@gmail.com> wrote:
> About securing replication, SSL only solve confidentiality, not authoriza=
tion.
> How do I go about making sure only authenticated party can replicate?
>
> Thank you

You may gain auth by client SSL certificate.

--
,,,^..^,,,

>
> =D7=91-10 =D7=91=D7=A0=D7=95=D7=91 2011, =D7=91=D7=A9=D7=A2=D7=94 21:47, =
Alexander Shorin <kxepal@gmail.com> =D7=9B=D7=AA=D7=91/=D7=94:
>
>> On Thu, Nov 10, 2011 at 7:59 PM, Ido Ran <ido.ran@gmail.com> wrote:
>>> 1. Does couch_httpd_oauth means CouchDB support OAuth authentication as=
 is,
>>> without reverse proxy or anything else?
>>> 2. How can I secure the replication between two couches?
>>>
>>
>> 1. Yes.
>> 2. SSL, native or via proxy like nginx.
>>
>> --
>> ,,,^..^,,,
>