1.B.1 FTS-vs-encryption strategy #152

Closed
opened 2026-07-27 00:26:35 +00:00 by KofTwentyTwo · 1 comment
KofTwentyTwo commented 2026-07-27 00:26:35 +00:00 (Migrated from github.com)

Decide+implement: index plaintext pre-encryption or drop body encryption for searchable fields. AC: body search returns real hits on the production store path; E2E.

Decide+implement: index plaintext pre-encryption or drop body encryption for searchable fields. AC: body search returns real hits on the production store path; E2E.
KofTwentyTwo commented 2026-07-27 03:27:45 +00:00 (Migrated from github.com)

Done on dev (commit 70b16f9): FTS indexes plaintext at write time; stored body columns stay ciphertext; real-save-path test proves body search; documented at-rest tradeoff.

Done on `dev` (commit 70b16f9): FTS indexes plaintext at write time; stored body columns stay ciphertext; real-save-path test proves body search; documented at-rest tradeoff.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: KofTwentyTwo/nuncio#152