#2953 - Extend encrypting to more than CPFs
0 guests and 0 members have recently viewed this.
The top 3 point earners from 7th Dec 2025 to 14th Dec 2025.
| PDStig |
|
|
|---|---|---|
| Gabri |
|
|
| Master Rat |
|
|
There are no events at this time
1) individual users decrypting their own stuff (in which case individual keys would need generating and saving in profiles)
2) staff-only being able to decrypt stuff
3) the system decrypting it's own stuff but at least stuff streaming out of the database is encrypted so a file-system breach would also be needed to undermine security
Someone would need to sponsor this feature as it is much more complex to use and specific than the vast majority of sites would need.
I am also concerned whether is is truly solving a security problem...
Consider the scenario of this improving trust between site owners and site users:
A site owner could just place fake encryption, and read everything anyway.
So little help there.
Consider the scenario of this providing a better security wall in case of hacking:
A hacker could just put in a backdoor that eats up key passwords.
So little help there.
It narrows the use case a lot. I think it only helps for the case of protecting from disgruntled staff who never had code-write access, and protecting from hackers who can never get code-write access.
"Could also be useful for..."
The non-bundled password_censor addon contains an 'encrypt' Comcode tag.