You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I think body encryption may be pretty simple and straight forward.
Dunno how compression would work. Your thinking about compressing all network traffic, not just part of the frames, right? That would require compression and decompression in the broker too.
Would come with a lot of cavets. Like adding Content-Transfer header etc to know which bodies to decompress and which to decrypt. What about messages from other sources? What about clients that want to consume messages published with compression/encryption?
Right. All traffic would have to go through amqproxy, and the same instance (or they must have the same keep). And key rotation is a problem. So, adding the code to encrypt/decrypt is straight forward, but to do a reasonable administration is not.
Publishing Client -> Proxy (compress) -> Broker -> Proxy (decompress) -> Consuming client.
Could also (potentially more complicated) provide a way to encrypt/decrypt message bodies.
The text was updated successfully, but these errors were encountered: