Rather than concentrating on the specific mechanisms, could you elaborate a bit on the overall goals and features of the system? Who is providing the documents? What are the threats you are guarding against? How is the system going to be used?
Colin -----Original Message----- From: George Washington [mailto:[EMAIL PROTECTED] Sent: 7 May, 2006 03:38 To: java-user@lucene.apache.org Subject: Re: Encryption Thank you all for your replies (and Otis and John for your lively sense of humour as well). I obviously accept the need to encrypt the index, but am not sure that using the Windows (or Linux) file system encryption will solve the problem. My understanding is that both cannot be under my application control, they need to be part of the site policy. Hence cannot be relied upon in all instances. I want the user to decide if encryption is required and then enable it knowing that it will be done. If my understanding above is correct, the other alternative is to use the Java Cryptography Extension (JCE) to encrypt (and decode) the index on the fly. This however is more complex, and where I was hoping your knowledge of Lucene could help. I suspect it would require careful choice of positioning of the encryption and decoding calls so as not to interfere for instance with segment optimisation and merging and many other such complications. Searching through this mailing list has revealed no interest in encryption at all. Any suggestion as to how JCE could be embedded in Lucene? (or whether I am on the right or wrong track!) Thanks Victor _________________________________________________________________ New year, new job - there's more than 100,00 jobs at SEEK http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fninemsn%2Eseek%2Ecom%2Ea u&_t=752315885&_r=Jan05_tagline&_m=EXT --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
