security - 不推荐使用Hadoop KMS？

Question

在阅读Cloudera KMS Installation procedure时，我发现

Cloudera strongly recommends not using Java Keystore KMS in production environments.

我在此建议背后找不到任何论点。
Cloudera实现(Trustee)是否解决了任何已知的风险？

Answer 1

根据这个

Cloudera provides two implementations of the Hadoop KMS:

还有这个

Cloudera strongly recommends not using Java Keystore KMS in production environments.

还有这个

Cloudera strongly recommends using Key Trustee KMS in production environments to improve the security, durability, and scalability of your cryptographic key management.

我可以得出结论，他们的技术负责人不喜欢Java KeyStore KMS，但是，为了向后兼容，他们的团队仍然可以使用这两种实现。