Hiya People!
I have, for some time, had a specific problem in mind. I cannot, for the life of me, think of a better group to tell me my idea is crap.
In any case, I have a personal knowledge base I host facing the internet on a VPS. It is perfect for me, accessible, based on dokuwiki so its really easy to backup entire installation, the works. It is setup as a private wiki, so login is mandatory for viewing, editing, etc.
What I am looking for is mechanism for encrypting the data on the webserver when the user is not logged in. Under this scheme, the content of the server would be encrypted, only to be decrypted by the authorised password and encrypted again upon logout (or timeout).
Does this make sense? are there solutions like this out there?
I will attempt writing a plugin for dokuwiki, just wanted to make sure there is something out there that solves this problem in general.
Thank you!
I think this plugin is probably the best you’re gonna get. It encrypts and decrypts on client side. So the data that is transmitted and stored in dokuwiki is already encrypted before it even hits the server, so data on server side at all times is encrypted. So even if an attacker gets access to the VPS, the data there is encrypted and they have no way of knowing what passphrase was used for the encryption as it not stored/configured on server side.