Skip to content

Security of our models #309

@grimpy

Description

@grimpy

Currently we are saving the privatekey of the data stored next to the data itself.
This however beats the purpose of encryption the data in the first place.

Some thoughts to improve this:

  • ask for encryption key each time secure data needs to be accessed, this secret can be passed by environment variables or stored in redis for limited time

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions