asfimport

Jan Høydahl (@janhoy) ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-2228?focusedCommentId=16068101&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-16068101)) Is this encrypted directory in production somewhere? How secure is it? Performance overhead?

Renaud Delbru ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15087144&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15087144)) Discussion copied from the following [dev thread](http://mail-archives.apache.org/mod_mbox/lucene-dev/201601.mbox/%[email protected]%3E) > I would strongly recommend against "invent your own mode", and instead > using standardized schemes/modes (e\.g\. XTS)\....

Robert Muir (@rmuir) ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15087165&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15087165)) > It is true that if the filesystem caches unencrypted pages, then with a warm cache you will likely get better performance\. However, this...

Renaud Delbru ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15089007&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15089007)) I agree with you that if we add encryption to Lucene, it should always be secure. That's why I opened up the discussion with the...

Robert Muir (@rmuir) ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15089614&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15089614)) https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2009/july/if-youre-typing-the-letters-a-e-s-into-your-code-youre-doing-it-wrong/ I am not sure where some of these ideas like "postings lists don't need to be encrypted" came from, but most of the...

Gennadiy Geyfman ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15134867&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15134867)) Thanks for your feedback, Robert. Just to give you some background, this feature is being developed for Salesforce, where we have customers that not only...

Robert Muir (@rmuir) ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15144305&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15144305)) > More importantly, with file-level encryption, data would reside in an unencrypted form in memory which is not acceptable to our security team and,...

Gennadiy Geyfman ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15176749&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15176749)) To provide a little more background, there are several reasons why we thought a file system based encryption scheme would not work for our case....

Adam Williams ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15180675&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15180675)) Iron Mountain is also interested in this solution. We have been following this ticket and hoping that it will become a reality. We have over...

Joel Bernstein (@joel-bernstein) ([migrated from JIRA](https://issues.apache.org/jira/browse/LUCENE-6966?focusedCommentId=15181311&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15181311)) Alfresco is also interested in this ticket. I'd like to see if there is a way to reach consensus on an approach for moving...