Versions Compared

Old Version 13

changes.mady.by.user srinibas@zededa.com

Saved on

compared with

New Version 14

changes.mady.by.user Hari C S

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Problem Statement

  1. The sentitive sensitive information, like datastore credentials, WiFi Passwords etc., are in clear-text format inside the configuration blob, received from EVE Controller. The sensitive information is exchanged between agents in the EVE node, as is through pubsub channel.
  2. The sensitive information should be in cypher text format inside the configuration blob for EVE node. A set of APIs will be provided to the EVE agents to decrypt them.
  3. The sensitive information exchange between the EVE Controller and EVE Node should be encrypted end-to-end,  in man-in-the middle proxy deployments also.
  4. There encryption methodology for this, should also work with third-party CA verification

...