Daniel (dB.) Doubrovkine

Catch All Triage - [1](https://github.com/dblock) [2](https://github.com/dbwiddis) [3](https://github.com/krisfreedain) [4](https://github.com/akolarkunnu) [5](https://github.com/mingshl) [6](https://github.com/getsaurabh02)

[Catch All Triage - Attendees [1](https://github.com/dblock/), [2](https://github.com/krisfreedain), [3](https://github.com/andrross), [4](https://github.com/gkamat), [5](https://github.com/getsaurabh02)]

I like this very much, very good! Some comments/questions. 1. You talk about uninstalling security which isn't possible. But will I be able to turn security off? Will I be...

@jkowall @AmiStrn I think backwards compatibility and careful deprecation are a must, so let's not assume that "enabling security by default" leads to "breaks everything". I would very much want...

Maybe we should be talking about adding a security _interface_ when we talk about _enabling security by default_? I believe that we definitely want the full default bundle distribution to...

> I would prefer if the 'security interfaces' were defined to achieve some of the goals in RFC and we have a reference set of pluggable implementations of those interfaces....

Another insecure by default cluster: https://link.medium.com/fonnHXaoSib

I decided to reopen this feature and rename it to "Add Security by Default". In short, this proposal consists in shifting responsibility of securing data, including DLS/FLS into OpenSearch core,...

[Catch All Triage - [1](https://github.com/dblock), [2](https://github.com/krisfreedain), [3](https://github.com/andrross), [4](https://github.com/reta), [5](https://github.com/cwperks)]

[Catch All Triage - [1](https://github.com/dblock), [2](https://github.com/reta)]