When storing information into passphrase, it would be great for that information to have some encryption, so its not just stored in plain text in mysql.
Potentially, you could also have a key to decrypt and show the credential on screen.
Description
Description
Related Objects
Related Objects
- Mentioned Here
- T4721: Improve user-facing documentation for Passphrase
Event Timeline
Comment Actions
Phabricator needs the ability to decrypt credentials in background processes and in a non-interactive manner. Thus any key to decrypt a credential would need to be stored at the same level as the Passphrase credential itself, defeating the point of encryption (you can't store the decryption keys as a file outside MySQL because that won't scale for HA).