ggershinsky commented on PR #17417: URL: https://github.com/apache/iceberg/pull/17417#issuecomment-5130531354
Thinking more about this, there could be a problem. If StatisticFile structs are kept in the metadata.json file (and not in a manifest/list file), the encryption key etc would be exposed in the `key_metadata` since the metadata is not encrypted. We might need to encrypt the `key_metadata` with a key encryption key (like with manifest list key_metadata) handling the AADs, or (less ideally) with the master key via the KMS. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
