Re: [Qemu-devel] RFC: Universal encryption on QEMU I/O channels

[Paolo Bonzini]

On 04/02/2015 15:02, Daniel P. Berrange wrote:
> > I'm not sure if it makes sense for RDMA; it already has a couple of hooks
> > that go around the back of QEMUFile in migration, and it's transferring the
> > data via DMA so the page data doesn't go through the same path.
> 
> Could you ever anticipate any need for authentication or encryption in
> the RDMA based channel ? I don't know enough about RDMA myself to know
> if it makes sense or not, other than the fact that any channel between
> two separate hosts needs security at some level in the stack.

Authentication, possibly; but I don't think encryption makes sense.  Marcel?

Paolo