Security for cached response bodies

[sckott]

Some responses may have content that the user doesn't want to be on the public web unsecured. We currently have ability to replace sensitive strings with placeholders, but not the entire response body.

Perhaps it's easy enough to toggle a switch to write a secure hash of the response body rather than the text response body itself. With a secure env var for encrypt/decrypt.

🤔

[sckott]

note to self: an example to play with is chimpr pkg where we don't want response bodies containing sensitive info to be public

[sckott]

there doesn't seem to be anything about this in ruby vcr

[maelle]

Perhaps it's easy enough to toggle a switch to write a secure hash of the response body rather than the text response body itself. With a secure env var for encrypt/decrypt.

Wow this sounds very cool. (well less so for external collaborators)

[sckott]

it does seem doable at least, haven't tried it yet though