Migrating to CockroachDB
&gt; if you want password-authentication, you must configure your cluster to communicate using certificates. You can start each node in &quot;insecure&quot; mode, but then can&#x27;t use password authentication. There&#x27;s a issue about this. Like the people posting there, our network is already secured, so this requirement is just an unnecessary nuisance.<p>Eh, I&#x27;m not sure how I feel about this. Obviously you should secure your network as best you can, but how confident are you really that a bad actor will <i>never</i> find a foothold anywhere in your network? I think I would advocate for your services to all communicate securely (TLS et al), even internally, and if your database supports mutual client&#x2F;server auth like it sounds like Cockroach does then you should use that as well. Particularly if you&#x27;re depending on at-rest encryption handled transparently by the DBMS to protect your users&#x27; data - that won&#x27;t do you much good if someone can just sniff&#x2F;MITM network traffic and wait until a bunch of your data has been queried.