confluence & encryption feature to secure contents

[Rebecca Puypalat]

Hello,

Is there any add on from the market place able to encrypt sensitive data for a limited number of persons

With the sub questions below :

• Is that encryption a end 2 end encryption to avoid for the DBA to access to the secure content
• From a quick look on the market place I saw encryption feature working with password management (security & encryption for confluence, secure encryption, S/Notify Email Encryption for Confluence…)?
  • Is the Notify Email encryption for confluence able to also encrypt the content in confluence out of the email notification?
  • Is there any encryption mechanism using PKI certificates?

BR
Rebecca

[Monique Khairuliana]

Hi @Rebu ,

I think that part of your questions are answered here:

https://community.atlassian.com/t5/Confluence-questions/Password-protection-Encryption-for-areas-pages-in-Confluence/qaq-p/947930

Hope this helps!

[Metin Savignano]

Hi

Not sure what you are actually asking for. Can you elaborate on your requirements a bit? Do you want to encrypt attachments in Confluence? Or do you want to encrypt the message contents of emails sent from Confluence? Or anything else?

S/Notify Email Encryption does exactly what its name says: it encrypts the emails sent out from Confluence. When it encrypts the email, of course anything contained in the email (like inline images) would be encrypted as well. External images would be loaded from remote with the same protection as when you access Confluence directly - which is usually through SSL encryption, maybe also a VPN tunnel.

Metin

[Rebecca Puypalat]

Hi,

Yes we would like to encrypt page content and attachements.

In addition we would like that data being stored encrypted in DB. For email notification I'm not sure but good idea I will ask.

BR

Rebecca

[Metin Savignano]

There are a few add-ons that encrypt attachments, but I don't think they encrypt page contents. However, I haven't tested them, as I haven't seen a requirement for this yet. Contents and attachments are stored on the server and can thus be protected by server-side means. For in-transit protection between server and client, SSL can be used. However, we do use email encryption to protect contents in email notifications which is otherwise unprotected.

As you did not say anything about your (business) requirements, I won't be able to say more.