You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
Data stored in the database is generally stored in plaintext. This is not a big issues for AIO or installs on the same server, but for installs using separate servers for NC and the database, particularly where the database server is not controlled by the NC operator, data can be easily viewed and compromised. In addition to NC server data, calendars, contacts, notes, etc could all be of concern.
Describe the solution you'd like
There should be an ability to encrypt data before or as it is written to the database. The key would likely be set in the NC config, but would help limit the exposure of data outside of the NC server itself.
Describe alternatives you've considered
Database-side encryption is a potential solution but would likely require different implementations for different servers. Implementing the encryption in NC itself would be database independent.
Additional context
My use case is having primary storage in object storage with server side encryption and a database I host, but a NC front-end my client hosts. I want to minimize the amount of data I control that can be read by myself or an attacker.
How to use GitHub
Please use the 👍 reaction to show that you are interested into the same feature.
Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
Subscribe to receive notifications on status change and new comments.
Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
Describe the solution you'd like
A clear and concise description of what you want to happen.
Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
Additional context
Add any other context or screenshots about the feature request here.
The text was updated successfully, but these errors were encountered:
Is your feature request related to a problem? Please describe.
Data stored in the database is generally stored in plaintext. This is not a big issues for AIO or installs on the same server, but for installs using separate servers for NC and the database, particularly where the database server is not controlled by the NC operator, data can be easily viewed and compromised. In addition to NC server data, calendars, contacts, notes, etc could all be of concern.
Describe the solution you'd like
There should be an ability to encrypt data before or as it is written to the database. The key would likely be set in the NC config, but would help limit the exposure of data outside of the NC server itself.
Describe alternatives you've considered
Database-side encryption is a potential solution but would likely require different implementations for different servers. Implementing the encryption in NC itself would be database independent.
Additional context
My use case is having primary storage in object storage with server side encryption and a database I host, but a NC front-end my client hosts. I want to minimize the amount of data I control that can be read by myself or an attacker.
How to use GitHub
Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
Describe the solution you'd like
A clear and concise description of what you want to happen.
Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
Additional context
Add any other context or screenshots about the feature request here.
The text was updated successfully, but these errors were encountered: