Re: [mosquitto-dev] Accepting connection based on client's certificate

[Greg Troxel <gdt@xxxxxxxxxx>]

Looking at how to have external authentication or authorization
processes, forking shell scripts seems really suboptimal.  You might
look at how dovecot makes its sasl database available to others via a
unix-domain socket.  That allows a coprocess that isn't
starting/stopping and having to read the db all the time.  This is also
sort of like the milter interface for spam/virus filtering.

More generally, it seems like a plugin architecture might eventually be needed.

(I am assuming that since you care about security so much you aren't
using Windows, and hence that unix-domain sockets are available.)