search

mlswg / mls-architecture

MLS architecture
Other
66 stars 26 forks source link

Encrypted at rest #226

Closed ekr closed 8 months ago

ekr commented 11 months ago

RECOMMENDATION: In the case where metadata has to be persisted for functionality, it should be stored encrypted at rest and then decrypted during the execution. Applications should also consider anonymous systems for server fanout (for example {{Loopix}}).

How does this really help to encrypt it at rest? The keys need to be readily available to provide the functionality.

beurdouche commented 8 months ago

Correct, I updated and relocated that recommendation.