[openstack-dev] [Nova] FFE Request: Encrypt Cinder volumes

Bryan D. Payne bdpayne at acm.org
Fri Sep 6 23:17:43 UTC 2013


> 2) There is general consensus that the simple config based key manager
> (single key) does provide some amount of useful security.  I believe it
> does, just want to make sure we're in agreement on it.  Obviously we
> want to improve this in the future.
>

I believe that it does add value.  For example, if the config is on a
different disk than the volumes, then this is very useful for ensuring that
data remains secure on RMA'd disks.

-bryan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130906/3ac3fcd9/attachment.html>


More information about the OpenStack-dev mailing list