Encrypting ResourceSpace data in the database

[Willy]

Hello,

I have been working with the ResourceSpace in the past 6 months and I love the customization ability.

I do have a question about data encryption. I believe ResourceSpace has been used in an environment that involves sensitive data. Is there any way to encrypt the database data other than the password? I am looking for a way to encrypt usernames, email addresses and probably even the resources' titles or descriptions.

Thanks.

[Dan Huby]

Hi Willy,

The problem is it would need to be decrypted for display / usage so if your server was compromised it would be trivial to use the application itself to decrypt the data.

If it's just the storage you're concerned about then you could look at this (note it is commercial not open source)

https://www.mysql.com/products/enterprise/encryption.html

Dan