[rabbitmq-discuss] RPC authenticity relies on routing key?
Nathaniel Haggard
natester at gmail.com
Thu Mar 11 21:03:20 GMT 2010
Machine D sends a message to exchange E1 with routing key send_to_A to
execute a remote procedure call on A. A replies back using another
exchange E2 with routing key results_of_A, but A could easily use the
key results_of_B. Does rabbitmq have a way of making A only use the
key results_of_A?
Only D can write to E1. A, B, C can write to E2. I suppose A, B, C
are all different users in the system although that seems overkill.
Is there a better way to make sure the results from an RPC to A are
really from A and not from B?
I think it would not scale well (in the thousands) if A, B, C each had
permissions to write to one queue exchanges E2, E3, and E4, but maybe
that's wrong too.
-Nate
More information about the rabbitmq-discuss
mailing list