This message was deleted.

FWIW, there is an open issue for adding fips encryption.

Thanks for sending this over .. as of right now is using standard E2EE steps (from Pulsar documentation) the best practice to ensure encryption and security in a Pulsar cluster? We are trying to find the best ways to make pub/sub systems as secure as possible.

Yes, following the steps in the Pulsar documentation is the best practice for E2EE. It does require you to write a little bit of code, but it does provide the ability to use whatever KMS solution you choose.