Skip to content

database encryption #108

Open
Open

Description

@lukesmurray

Mysql support database encryption where the data is only encrypted in the database is returned to the application unencrypted. This is called data at rest encryption.

https://dev.mysql.com/doc/refman/5.7/en/faqs-tablespace-encryption.html

I believe this would be the easiest way to encrypt data in the database since it requires no changes on the application side.

Activity

  1. self-assigned this
    on Apr 9, 2019
  2. lukesmurray commented on Apr 9, 2019

    @lukesmurray
    CollaboratorAuthor

    started messing around with this and its harder than expected. The keyring file needs to be stored in a directory that only mysql can access, so it cannot be passed as a docker volume. I believe this could be implemented on the server without too much effort. I don't want to stop local development with docker so I think an alternative solution would be worth looking in to.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions