TLS

If I got a dollar every time I hear “we had to disable security and authentication in Elasticsearch because otherwise it was unusable”, I’d be a bit richer by now ;-) Honestly, I don’t quite get where the confusion comes from. It’s 2024, yet some of us are still surprised by “what do you mean: certificate and password???” Let me explain security in Elasticsearch in a few simple paragraphs. I’ll start by saying this isn’t just about Elasticsearch, but anything that communicates over HTTPS.