Authentication should only occur over secure channels. Support for SSL/TLS communication should be added for authentication.

This form of authentication should include client certificate authentication for the purpose of mutually authenticating replication partners. Even with anti-replay nonce values and encrypted "keys" clear text authentication will be vulnerable to man-in-the middle attacks.