gaborkaszab commented on PR #17533: URL: https://github.com/apache/iceberg/pull/17533#issuecomment-5201485467
Hey @singhpk234 , The problem with `key-metadata` is that it is the raw, unencrypted information on how to decrypt stuff. While it's safe to keep `key-metadata` on e.g. the data file / manifest entry level, because those files are encrypted themselves in turn encrypting `key-metadata` together with the file it contains this field, it's not safe to keep it on the table metadata level because that is not encrypted. It would expose the raw `key-metadata`. The same goes for manifest list encryption, and I believe we should follow the same approach for statistics file linked from table metadata. See @ggershinsky 's and @RussellSpitzer 's [comments here](https://github.com/apache/iceberg/pull/17417#issuecomment-5130531354). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
