#2953 - Extend encrypting to more than CPFs

This is a spacer post for a website comment topic. The content this topic relates to: #2953 - Extend encrypting to more than CPFs
Perhaps also offer the ability to encrypt forum posts on user request in the posting screen, and make anonymous post get encrypted (if available) by default.
It is important to bear in mind that the system can't self-decrypt anything right now by design - a key password needs to be entered by the admin each time. That stops system breaches leading to data exposure unless a backdoor is also placed there. This issue seems to cover use cases of:
1) individual users decrypting their own stuff (in which case individual keys would need generating and saving in profiles)
2) staff-only being able to decrypt stuff
3) the system decrypting it's own stuff but at least stuff streaming out of the database is encrypted so a file-system breach would also be needed to undermine security

Someone would need to sponsor this feature as it is much more complex to use and specific than the vast majority of sites would need.

I am also concerned whether is is truly solving a security problem...

Consider the scenario of this improving trust between site owners and site users:
A site owner could just place fake encryption, and read everything anyway.
So little help there.

Consider the scenario of this providing a better security wall in case of hacking:
A hacker could just put in a backdoor that eats up key passwords.
So little help there.

It narrows the use case a lot. I think it only helps for the case of protecting from disgruntled staff who never had code-write access, and protecting from hackers who can never get code-write access.

"Could also be useful for..."

The non-bundled password_censor addon contains an 'encrypt' Comcode tag.

0 guests and 0 members have recently viewed this.