frappe / frappe/press

MariaDB Data Encryption

Open
#3,071 1 comment 3 reactions 1 assignee Claimed by @tanmoysrt View on GitHub
Dominant language
Python
Stars
563
Forks
410
Avg merge
22h 15m
Merged PRs (30d)
197

Description

Currently, we dont't encrypt the data of mariadb on disk.
We could have this optional feature to provide more security to customer.

MariaDB has different plugins for encryption
- File based Key Management
- AWS KMS & Hashicorp Vault

File based key management is not much secured even with encrypted keys, considering can be snapshotted and attached to other machine to extract data. Also, doesn't support Key Rotation.

Either we need to go for AWS KMS or build MariaDB plugin for the same

Docs : https://mariadb.com/docs/server/security/securing-mariadb/encryption/data-at-rest-encryption/data-at-rest-encryption-overview

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.