-
A set of requirements and a detailed design is needed before beginning implementation of a Core encryption service.
A PRD (Product Requirements Document) has already been drafted and is awaiting r…
-
### What happened?
In https://github.com/pulumi/pulumi-gcp/issues/2096 it was discovered that Computed + !Optional + !Required is not respected on nested object properties in tfgen.
The schemas …
-
### Summary
Adding XChaCha20-Poly1305 as a barrier encryption algorithm preserves PQC resistance but removes the unsafe [nonce reuse problem](https://www.ietf.org/proceedings/96/slides/slides-96-saag…
-
This is a very good project, lightweight, simple, and commonly used. I think we also need to add some common parsing instructions, such as `#EXT-X-KEY`.
Some videos are encrypted and need to be decry…
-
We are seeing errors in the logs related to postgres connection failure for the container owp-hml-ingester_hml_cleaner.
A sample capture of the logs are below...
Jun 14 07:10:01 ip-10-27-63-150 dock…
-
# Overview
We've had a discussion about [TOTP secret encryption](https://github.com/elliot-sawyer/totp-authenticator/issues/1) recently. While that's in a module that's not part of the core recipe,…
-
Currently plan files persisted in workplace artifacts in GitHub are not encrypted (see #817). This is a security concern because plan artifacts contain a snapshot of state, which can contain sensitive…
-
## Description
[CloudFront Origin Access Control](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html) (OAC) is the recommended way to s…
-
At the moment `restic` doesn't have a way of changing the master key of a `restic` repository. Each individual subkey is just an encrypted copy of the masterkey. This means that if one of the `keys/..…
-
# [RFC] Use libsodium instead of OpenSSL
## Summary
This RFC conceptualise the implementation and migration of libsodium instead of OpenSSL to power transcrypt.
It will increase security and us…