Blog System/5 • 744 implied HN points • 04 Nov 24
- NFSv3 is not secure because it trusts clients too much and does not encrypt traffic. This means anyone on the network can access sensitive data if they can impersonate a user.
- NFSv4 is much better because it uses usernames for permission checks and can work with Kerberos for strong security features. This ensures that only authorized users can access files.
- Setting up NFSv4 with Kerberos can be really complicated, but it's important for protecting data. Proper configuration is crucial, and sometimes mistakes can lead to security issues.