Wikipedia says v4 came out in 2000 and a search for encryption on the page shows... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Polylactic_acid on Oct 12, 2020 \| parent \| context \| favorite \| on: We spent two weeks hunting an NFS bug in the Linux... Wikipedia says v4 came out in 2000 and a search for encryption on the page shows no results. sftp gives you really good key based authentication and encryption over the network. I wouldn't trust NFS for anything other than a highly secure internal network.

yrro on Oct 12, 2020 | [–]

Mount with sec=krb5p and you get encryption (the p is short for Privacy).

starfallg on Oct 12, 2020 | [–]

>a search for encryption on the page shows no results

https://wiki.debian.org/NFS/Kerberos

krb5p is pretty secure. You just need a Kerberos implementation. The alternative is to run NFS over Stunnel, which is what Amazon does for EFS.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact