APISIX supports encrypting fields holding sensitive information like
`password`, `access_token` etc.
This is supported by the `enable_encrypt_fields
<https://github.com/apache/apisix/blob/c0e3d9150f06c3140a52d145782085d26bc1ea67/conf/config-default.yaml#L121>`
configuration field in the config.yaml file which
is `false` by default.

I propose that we should encrypt such sensitive fields by default by
setting `enable_encrypt_fields`
to `true` to reduce the chances of sensitive information leaks.

Reply via email to