Encrypt sensitive data
- Dominant language
- Go
- Stars
- 30.1k
- Forks
- 4.6k
- Avg merge
- 1d 18h
- Merged PRs (30d)
- 39
Description
We noticed that there are already two issues about encryption of sensitive data, but there is no clear official solution yet.
One is https://github.com/hashicorp/consul/issues/10150 ,the another is https://github.com/hashicorp/consul/issues/8306
In summary:
1. in the data directory, the tokens on disk is unencrypted
2. the encryption key for Gossip placed in the configuration file is plain text
3. the private key file is plain text on disk
These sensitive data are not encrypted and stored, and there are security issues.
Do have any plans for the future?
Contributor guide
Research direction
Review the two related issues, #10150 and #8306, alongside the stated storage locations: the data directory, the configuration file, and the private key file. Define the official encryption scope and acceptance criteria for protecting each sensitive value before implementation; this issue does not identify source files or tests.
Written by the indexing model from the issue text.
Assessment
- Domain
- infrastructure, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100