[chef-dev] Re: How Secure is an encrypted data bag, really?

[Joshua Miller < >]

Mostly you chef repo will not contain private info if you use encrypted data bags wisely.  This allows you to share it with everyone with little concern they are going to get sensitive information.

Joshua

-- 

Joshua Miller

Sent with Sparrow

On Thursday, October 3, 2013 at 10:23 PM, Bryan Taylor wrote:

If an attacker gains access to the chef server, can they not alter cookbook code that chef clients eventually run to obtain the data bag decryption keys this way?  Is there any protection against this? If not, are there still scenarios where the encryption does add value?