[zeromq-dev] Partially encrypted service

[Pieter Hintjens]

On Tue, Apr 1, 2014 at 10:04 AM, Goswin von Brederlow <goswin-v-b at web.de> wrote:

> Can I have ONE (server) socket that accepts both CURVE and NULL connects?

No, you cannot. Technically it would be doable, however it would be
utterly insecure and confusing to the user. You define a specific
level of security on a socket and any traffic you get passes
authentication. The API does not allow a mix of security levels.

> Is that possible? Or does setting a CURVE keypair for the (server)
> socket require all connects to use CURVE?

Yes, it does, and that is deliberate design.

-Pieter