Page MenuHomePhabricator

Store secrets using encryption
Closed, DuplicatePublic

Description

It seems that secrets are stored in plain text. A SQL dump reveals them all.

It would be nice to have the option to store them encrypted in MySql.

Event Timeline

igorgatis raised the priority of this task from to Needs Triage.
igorgatis updated the task description. (Show Details)
igorgatis added projects: Phabricator, Security.
igorgatis added a subscriber: igorgatis.

Just for the sake of clarification: data in MySql is NOT encrypted and there is no mechanism built-in in phab to do so. Correct?

IMO, this is so critical that I'd leave a separate task for that.