we are running a confluence 4.2.3 installation as our primary wiki. Even if we make use of page permissions and user management, we still can not store certain kind of data in the wiki like encryption keys, purchase prices and so on.
I was googling around a lot and I've seen different plugins for safely storing passwords like vault plugin or a plugin for sending a page encrypted using e-mail.
This is not what I'm looking for. I need something to store a document which is being encrypted either on clientside or immediately on server side so the information can not be retrieved by an administrator.
I would prefer a clientside implementation, because if its encrypted on the server it may still be intercepted by an administrator.
Of course the encryption could only be symmetric as it must be possible to be decrypted by anyone who knows the right passphrase.
The users currently all run Firefox 10 (yes, 10 as it's certified by atlassian) and a browser plugin maybe fine, too.
Let me rephrase the idea:
- User types 'Price of car is €29.000' to a textbox
- Plugin (either browser specific or confluence) detects submission of form
- Plugin asks for passphrase (or uses default)
- Plugin encrypts to 'Cevpr bs pne vf €29.000' (hopefully not rot13 ;))
- Plugin encrypts form data and sends the encrypted form to server
- Server does not know anything about encryption and happiliy stores data
- Admin not happy, as she cannot read sensitive information from db
Any suggestions and ideas are very welcome.
Thanks in advance