Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-12306

Externalize 3DES key used for obfuscation to a file

    • Icon: Suggestion Suggestion
    • Resolution: Done
    • 5.15.0.1
    • Security
    • None
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Based on discussion with support BSP-8304. Our company's security team would like to officially request that the key used for obfuscation in bamboo; EncryptionService is externalised to it's own file.

      This would ensure that the passwords in our database could not be deciphered by anyone with the source code.

            [BAM-12306] Externalize 3DES key used for obfuscation to a file

            EddieW added a comment -

            {quote}
            pbruski made changes - 6 minutes ago

            Status Open [ 1 ] In Progress [ 3]

            {quote}

            Hooray!!

            EddieW added a comment - {quote} pbruski made changes - 6 minutes ago Status Open [ 1 ] In Progress [ 3] {quote} Hooray!!

            EddieW added a comment -

            Following up. Externalizing would be best option as it gives us control, but even upgrading to AES 128/256 would meet company policy enabling us to continue adoption.

            EddieW added a comment - Following up. Externalizing would be best option as it gives us control, but even upgrading to AES 128/256 would meet company policy enabling us to continue adoption.

            Thanks for the feature request Edward.

            James Dumay added a comment - Thanks for the feature request Edward.

            EddieW added a comment -

            Feature request based on discussion with support.

            EddieW added a comment - Feature request based on discussion with support.

              pbruski Przemek Bruski
              3a10b11ad777 EddieW
              Votes:
              5 Vote for this issue
              Watchers:
              11 Start watching this issue

                Created:
                Updated:
                Resolved: