[jira] [Created] (KAFKA-8205) Kafka SSL encryption of dataat rest

["Niten Aggarwal (JIRA)" <ji...@apache.org>]

Niten Aggarwal created KAFKA-8205:
-------------------------------------

             Summary: Kafka SSL encryption of dataat rest
                 Key: KAFKA-8205
                 URL: https://issues.apache.org/jira/browse/KAFKA-8205
             Project: Kafka
          Issue Type: Bug
          Components: security
    Affects Versions: 1.0.1
         Environment: All
            Reporter: Niten Aggarwal


Recently we enabled SSL on our kafka cluster which earlier had SASL PLAINTEXT. Everything works fine from both producer and consumer standpoint as expected with one strange behavior. We noticed data in the log file is also encrypted which we didn't thought of because SSL is meant for transport level security not to encrypt data at rest.

It doesn't mean we have any issues with that but would like to understand what enables to perform encrypting data at rest. Do we have a way to:-

1) turn it off

2) Extend the encryption algorithm if company would like to use their own key management system and different algorithm.

After going through Kafka docs, we realized there is a KIP already in discussion but how come it's implemented without been approved?

[https://cwiki.apache.org/confluence/display/KAFKA/KIP-317%3A+Add+transparent+data+encryption+functionality]

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)