Jennifer88huang commented on a change in pull request #5091: [doc] Improve Pulsar Security Encryption URL: https://github.com/apache/pulsar/pull/5091#discussion_r321193115
########## File path: site2/docs/security-encryption.md ########## @@ -4,19 +4,19 @@ title: Pulsar Encryption sidebar_label: End-to-End Encryption --- -Pulsar encryption allows applications to encrypt messages at the producer and decrypt at the consumer. Encryption is performed using the public/private key pair configured by the application. Encrypted messages can only be decrypted by consumers with a valid key. +Pulsar encryption allows applications to encrypt messages at the producer side and decrypt messages at the consumer side. You can use the public and private key pair that the application configures to perform encryption. Only the consumers with a valid key can decrypt the encrypted messages. ## Asymmetric and symmetric encryption -Pulsar uses dynamically generated symmetric AES key to encrypt messages(data). The AES key(data key) is encrypted using application provided ECDSA/RSA key pair, as a result there is no need to share the secret with everyone. +Pulsar uses dynamically generated symmetric AES key to encrypt messages(data). You can use the application provided ECDSA/RSA key pair to encrypt the AES key(data key), so you do not have to share the secret with everyone. -Key is a public/private key pair used for encryption/decryption. The producer key is the public key, and the consumer key is the private key of the key pair. +Key is a public and private key pair used for encryption or decryption. The producer key is the public key of the key pair, and the consumer key is the private key of the key pair. -The application configures the producer with the public key. This key is used to encrypt the AES data key. The encrypted data key is sent as part of message header. Only entities with the private key(in this case the consumer) will be able to decrypt the data key which is used to decrypt the message. +The application configures the producer with the public key. You can use this key to encrypt the AES data key. The encrypted data key is sent as part of message header. Only entities with the private key (in this case the consumer) are able to decrypt the data key which is used to decrypt the message. -A message can be encrypted with more than one key. Any one of the keys used for encrypting the message is sufficient to decrypt the message +You can encrypt a message with more than one key. Any one of the keys used for encrypting the message is sufficient to decrypt the message. -Pulsar does not store the encryption key anywhere in the pulsar service. If you lose/delete the private key, your message is irretrievably lost, and is unrecoverable +Pulsar does not store the encryption key anywhere in the pulsar service. If you lose ordelete the private key, your message is irretrievably lost, and is unrecoverable. Review comment: "Pulsar", "Apache Pulsar" are proper nouns for this project. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
