Hi all,

Last week I opened an issue to report what I believe is a regression
in the HTTPClient when using TLS:

https://github.com/apache/iceberg/issues/15598

I also opened a PR to fix it:

https://github.com/apache/iceberg/pull/15500

The fix is basically to expose the HostnameVerificationPolicy in the
TLSConfigurer, and I think there is consensus on that.

However I would like to have the community's opinion about the default
value we should use for the HostnameVerificationPolicy.

We can either go with:

- CLIENT, which reproduces the current behavior in 1.10 but is less safe; or
- BOTH, which introduces a behavioral change, but is the safest option.

What do you think?

Thanks,
Alex

Reply via email to