#2953 - Extend encrypting to more than CPFs
-
By PDStig
- Added
- 3 views
| Identifier | #2953 |
|---|---|
| Issue type | Feature request or suggestion |
| Title | Extend encrypting to more than CPFs |
| Status | Open |
| Tags |
Type: Legal compliance / Privacy (custom) Type: Security (custom) |
| Handling member | Deleted |
| Addon | core |
| Description | Extend the encryption capabilities found in Custom Profile Fields elsewhere. The biggest place I can think of is catalogues. Certain catalogue fields can be selected to be encrypted in the database, especially if the field is very privacy sensitive info.
Could also be useful for sensitive forums, private topics, and the support ticket system (tickets could contain sensitive info like passwords and connection info, etc.). Might also be useful for chats. |
| Steps to reproduce | |
| Additional information | Performance hit possible. Staff need to be aware of encryption implications (eg. hard to recover) |
| Funded? | No |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".
Comments
1) individual users decrypting their own stuff (in which case individual keys would need generating and saving in profiles)
2) staff-only being able to decrypt stuff
3) the system decrypting it's own stuff but at least stuff streaming out of the database is encrypted so a file-system breach would also be needed to undermine security
Someone would need to sponsor this feature as it is much more complex to use and specific than the vast majority of sites would need.
I am also concerned whether is is truly solving a security problem...
Consider the scenario of this improving trust between site owners and site users:
A site owner could just place fake encryption, and read everything anyway.
So little help there.
Consider the scenario of this providing a better security wall in case of hacking:
A hacker could just put in a backdoor that eats up key passwords.
So little help there.
It narrows the use case a lot. I think it only helps for the case of protecting from disgruntled staff who never had code-write access, and protecting from hackers who can never get code-write access.
"Could also be useful for..."
The non-bundled password_censor addon contains an 'encrypt' Comcode tag.