From 66a89cefbedd260b5e4ac82d6474d3d699a6c01f Mon Sep 17 00:00:00 2001 From: jochen Date: Tue, 25 Aug 2026 23:37:52 +0200 Subject: [PATCH] =?UTF-8?q?Accept=200039=20=E2=80=94=20a=20node=20owns=20n?= =?UTF-8?q?o=20password,=20only=20an=20identity?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Settled in the operator's own words: nodes should not own passwords, only an identity when communicating to the broker. Recorded that way at the top of the record, because it is the whole decision in one line and the rest is why. What this obliges, in order of newness: enrolment is the one mechanism that does not exist. Per-node broker users, virtual hosts and per-queue permissions are broker configuration. Mutual authority is certificates on a connection already open. And the boundary must fail legibly, which is the requirement the debugging objection earned. --- 02-DECISIONS/0039-the-link-is-the-security-boundary.md | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/02-DECISIONS/0039-the-link-is-the-security-boundary.md b/02-DECISIONS/0039-the-link-is-the-security-boundary.md index 5539174..0d0e4de 100644 --- a/02-DECISIONS/0039-the-link-is-the-security-boundary.md +++ b/02-DECISIONS/0039-the-link-is-the-security-boundary.md @@ -1,5 +1,5 @@ --- -status: proposed +status: accepted date: 2026-08-25 deciders: jochen reconstructed: false @@ -15,8 +15,11 @@ declarations from, and names the gap it leaves: *"everything a node applies arri so what may be pushed, and how a joining node proves it is entitled to join, is now a question worth its own record."* -This is that record. It is a design decision about a boundary that does not exist yet, so it is -proposed rather than measured — but what it replaces is measured, and that is the argument. +This is that record. It is a design decision about a boundary that does not exist yet — but +what it replaces is measured, and that is the argument. + +Settled as: **a node owns no password. It owns an identity, and that identity is what it +presents to the broker.** ### What adoption does today