Client security policies require encryption of data stored on the Plone website at the application level. So it’s good that the plone administrator can access all the information stored in cms, but sysadmin should not copy files or browse dump databases for useful information. (therefore using encfs is not an option because sysadmin can do just that)
To enctrypt the database, cipher.encryptingstorage should be enough.
Is there a way to encrypt files in zope blobstorage in a similar way?
fRiSi source
share