[chef] Re: Client/Server secure model

[AJ Christensen < >]

http://wiki.opscode.com/display/chef/Authentication+and+Authorization

You can run the chef server on HTTPS for communication channel
encryption and the signed headers style authentication model ensures
that the chef server is not vulnerable to an SSL replay attack, among
other things.

Cheers,

AJ

On 7 February 2012 23:22,  
<
 >
 wrote:
> Hello,
>
> I'm quite new on Chef, but some guys told me that Chef don't use a secure
> channel model between client and server. So they told me to use "Puppet", 
> that
> does this natively  (I'm not talking about use a external tunnel or 
> something
> like that, but about Chef's internal secure communication
> implementation/model).
>
> I think this is not true (what they told me), but I have not solid 
> arguments to
> discuss/use with they.
>
> Can you help me?