Skip to content

E2EE with back-up keys to ensure constantly updated DEKs/KEKs #2

Description

@BrianEmilius

Is your feature request related to a problem? Please describe.
Currently only an admin can re-wrap keys for all records, and only when they are logged in. This created a latency when new users log in or when existing users log in from a new device.

Describe the solution you'd like
When a new user logs in for the first time or an existing user logs in from at new device, a process should run in the background that re-wraps keys for encrypted records.

Describe alternatives you've considered
Alternatively some kind of backup key per user so there are no issues with non-record-owners trying to re-wrap keys for records they should not have access to.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request
No fields configured for Feature.

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions