# Security

- TLS with system roots.
- TLS with custom CA.
- TLS server-name override.
- TLS client certificates.
- SASL/PLAIN.
- SASL/SCRAM-SHA-256.
- SASL/SCRAM-SHA-512.

## Out Of Scope Today

- OAuthBearer.
- GSSAPI/Kerberos.
- AWS/MSK IAM.

