I am a web developer and I sometimes develop websites on my laptop that include confidential client information. I can turn on encryption for the relevant folders but when I do, my local Apache server is no longer able to access data in the encrypted folders. How do I allow Apache to access the encrypted data without compromising the encryption?

link|improve this question
What encryption do you use? – cularis Jul 8 '11 at 11:00
feedback

1 Answer

up vote 2 down vote accepted

All software, including Apache server is running under a user account. The specific user account limits the rights of software to access resources such as files or the network. Some "user" accounts are internal to Windows, though, and do not represent human users. Apache will likely run under such an internal account.

When you encrypt a file in Windows, you typically also restrict access to your own user account. As a result, other user accounts cannot access it anymore. Since Apache doesn't run under your user account (it works while you're not logged in, after all), Apache cannot access your encrypted files.

One easy solution is to turn on whole-disk encryption. This should be the default for laptops anyway; they're just too vulnerable to theft, loss, etc. You'll need a password to boot your laptop, but once it's booted the disk remains accessible to all software including Apache.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.