[jira] [Commented] (JSPWIKI-205) Obfuscate on disk content type

2014-09-18 Thread Craig L Russell (JIRA)

[ 
https://issues.apache.org/jira/browse/JSPWIKI-205?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14138565#comment-14138565
 ] 

Craig L Russell commented on JSPWIKI-205:
-

What I mean by export controls is exporting the jspwiki code outside the USA. 
Encryption technology is controlled by government regulations 
http://en.wikipedia.org/wiki/Export_of_cryptography_from_the_United_States

 Obfuscate on disk content type
 --

 Key: JSPWIKI-205
 URL: https://issues.apache.org/jira/browse/JSPWIKI-205
 Project: JSPWiki
  Issue Type: Improvement
  Components: Core  storage
Reporter: Chris Lialios
Priority: Trivial
 Attachments: BasicOverview.doc, EncryptingProviderSource.zip, 
 encryption.patch


 We would like to store passwords within the wiki pages. 
 Securing the page is trivial, however the contents on disk remain clear text.
 It would be very nice to have a page type that could be stored in an 
 obfuscated form on disk. 
 As an addition  have a secondary password to display/edit the encrypted 
 contents on disk for those who do not want to use wiki security on the page.
 I suspect this will have potentially drastic effects on the revisions 
 process, but it would be a small price to pay for security.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)


[jira] [Commented] (JSPWIKI-205) Obfuscate on disk content type

2014-09-18 Thread David Vittor (JIRA)

[ 
https://issues.apache.org/jira/browse/JSPWIKI-205?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14138594#comment-14138594
 ] 

David Vittor commented on JSPWIKI-205:
--

Thanks Craig, that's another eye opener, there are legal rules around what 
encryption data can and can't be imported and exported to the USA.



 Obfuscate on disk content type
 --

 Key: JSPWIKI-205
 URL: https://issues.apache.org/jira/browse/JSPWIKI-205
 Project: JSPWiki
  Issue Type: Improvement
  Components: Core  storage
Reporter: Chris Lialios
Priority: Trivial
 Attachments: BasicOverview.doc, EncryptingProviderSource.zip, 
 encryption.patch


 We would like to store passwords within the wiki pages. 
 Securing the page is trivial, however the contents on disk remain clear text.
 It would be very nice to have a page type that could be stored in an 
 obfuscated form on disk. 
 As an addition  have a secondary password to display/edit the encrypted 
 contents on disk for those who do not want to use wiki security on the page.
 I suspect this will have potentially drastic effects on the revisions 
 process, but it would be a small price to pay for security.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)


[jira] [Commented] (JSPWIKI-205) Obfuscate on disk content type

2014-09-18 Thread Siegfried Goeschl (JIRA)

[ 
https://issues.apache.org/jira/browse/JSPWIKI-205?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14139403#comment-14139403
 ] 

Siegfried Goeschl commented on JSPWIKI-205:
---

Hi folks, the relevant link is [http://www.apache.org/dev/crypto.html] having 
the following requirement

Software using a symmetric algorithm employing a key length in excess of 
56-bits;

in other words - if you use DES you are fine (56 bit key) but using AES or 
Blowfish requires the legal stuff 






 Obfuscate on disk content type
 --

 Key: JSPWIKI-205
 URL: https://issues.apache.org/jira/browse/JSPWIKI-205
 Project: JSPWiki
  Issue Type: Improvement
  Components: Core  storage
Reporter: Chris Lialios
Priority: Trivial
 Attachments: BasicOverview.doc, EncryptingProviderSource.zip, 
 encryption.patch


 We would like to store passwords within the wiki pages. 
 Securing the page is trivial, however the contents on disk remain clear text.
 It would be very nice to have a page type that could be stored in an 
 obfuscated form on disk. 
 As an addition  have a secondary password to display/edit the encrypted 
 contents on disk for those who do not want to use wiki security on the page.
 I suspect this will have potentially drastic effects on the revisions 
 process, but it would be a small price to pay for security.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)