MongoDB Releases Queryable Encryption Preview
1–10 of 69 posts
Re: MongoDB Releases Queryable Encryption Preview
#2This looks really cool. Albeit feels that it is actually a feature implemented in the driver (client side) so my initial impression is that is not a meanignfull innovation on the server side. This can be implemented with any Database, even with current MongoDBs
Re: MongoDB Releases Queryable Encryption Preview
#3This looks really cool. Albeit feels that it is actually a feature implemented in the driver (client side) so my initial impression is that is not a meanignfull innovation on the server side. This can be implemented with any Database, even with current MongoDBs
We use Mongoose, for sensitive data we have a wrapper around the .pre Save() method da encrypts it before sending data to the downstream db. Feels that MongoDB implemented that, in a more elegant structured code.
Re: MongoDB Releases Queryable Encryption Preview
#4This looks really cool. Albeit feels that it is actually a feature implemented in the driver (client side) so my initial impression is that is not a meanignfull innovation on the server side. This can be implemented with any Database, even with current MongoDBs
Nope it’s implemented on the server side. I think that they are going to talk more about it at a session and maybe even in a keynote
Re: MongoDB Releases Queryable Encryption Preview
#5can this be done in postgres via client or via server? I found it really nice
Re: MongoDB Releases Queryable Encryption Preview
#6This looks really cool. Albeit feels that it is actually a feature implemented in the driver (client side) so my initial impression is that is not a meanignfull innovation on the server side. This can be implemented with any Database, even with current MongoDBs
> This can be implemented with any Database, even with current MongoDBs
Is it really all client side? How could they do things like substring matching without sending the entire index back and forth to the client? The graphic seems to show the query being executed solely on the server (although graphics often lie).
Re: MongoDB Releases Queryable Encryption Preview
#7I didn't know this was a thing. The article mentions it can do equality, range, prefix, suffix and substring queries. Does this mean that the encryption scheme creates sortable 1:1 mapped results after encryption? Kind of like a shift cipher?
Re: MongoDB Releases Queryable Encryption Preview
#8seriously did not think we would see homomorphic encryption productized for a few more years. pretty impressive!
Re: MongoDB Releases Queryable Encryption Preview
#9seriously did not think we would see homomorphic encryption productized for a few more years. pretty impressive!
> Some of the existing tools, such as homomorphic encryption or secure enclaves have performance unsuited to scalable encrypted search, require proprietary hardware, or have uncertain security properties.
I don't think this is exactly homomorphic. I hope they put out a whitepaper so researchers can properly evaluate its security.
Re: MongoDB Releases Queryable Encryption Preview
#10This is a really neat technology, but I don't understand it's use case. I've worked in HealthTech and currently in the compliance space. I'm skeptical of Mongo's claims (and their familiarity with compliance laws). Kind of feels like a solution in search of a problem.
"In use" implies that you have a need to process that data. It doesn't matter if the end client is submitting queries in plain text (protected in transit) or this fancy encryption, the client (or server) still needs to be authorized to query that data. Translating from plain-text to encryption does not add additional protections from a compliance perspective.