summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThien-Thi Nguyen <ttn@gnuvola.org>2021-07-30 22:53:10 -0400
committerThien-Thi Nguyen <ttn@gnuvola.org>2021-07-30 22:53:10 -0400
commitc8676652f40d5aae733052ba95dd17b56ca4c6ce (patch)
treefb00abeaa84696ae6a970e5edd1df9bc4d08a954
parentbdc9f26344d2da21e8b8e0662bf8be2a9a5d9ec3 (diff)
downloaddocs-c8676652f40d5aae733052ba95dd17b56ca4c6ce.tar.gz
docs-c8676652f40d5aae733052ba95dd17b56ca4c6ce.tar.bz2
docs-c8676652f40d5aae733052ba95dd17b56ca4c6ce.zip
add note re database storing private keys / backups SHOULD be encrypted
This addresses #6943 (https://bugs.gnunet.org/view.php?id=6943).
-rw-r--r--taler-merchant-manual.rst7
1 files changed, 7 insertions, 0 deletions
diff --git a/taler-merchant-manual.rst b/taler-merchant-manual.rst
index d6d7d9c8..9ccc377c 100644
--- a/taler-merchant-manual.rst
+++ b/taler-merchant-manual.rst
@@ -586,6 +586,13 @@ Commands, like ``taler-merchant-dbinit``, that support the ``-l LOGFILE``
command-line option, send logging output to standard error by default.
See :doc:`manpages/taler-merchant-dbinit.1` for more information.
+.. note::
+
+ The Taler merchant backend stores private keys and other sensitive
+ business and customer data in the database. The backend operator
+ SHOULD ensure that backup operations are encrypted and secured from
+ unuathorized access.
+
.. index: MASTER_KEY