Encrypt mongodb key #1463
Labels
Complexity: Medium
Feature
Issue that describes a new feature to be implemented.
Impact: High
Security
sp/5
Is your feature request related to a problem? Please describe.
We hold mongodb key on the same machine as the island, so if anyone can access the island and steal the database, they can steal the key as well and decrypt everything
Describe the solution you'd like
Encrypt mongodb key on registration. On start/login decrypt the key and use it from memory
Describe alternatives you've considered
Please describe alternative solutions or features you have considered.
Tasks
The text was updated successfully, but these errors were encountered: