How to encrypt proxy cache

Mon Apr 3 16:42:45 UTC 2017

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello!

On 04/03/2017 08:21 PM, sachin.shetty at gmail.com wrote:
> Hi,
> 
> We are testing using nginx as a file cache  in front of our app,
> but the contents of the proxy cache directory are readable to any
> body who has access to the machine.

[..]

> Is there a way to encrypt the files stored in the proxy cache
> folder so that it' not exposed to the naked eye but nginx decrypts
> it on the fly before serving it to the user.

I didn't get your expectations and why you doing this. Then if the
content can publicly visible over nginx, why the sysadmin or other
trying to break the proxy cache directly?

I think they (your engineer) will call the URL directly over the
browser. (eg. http://localhost/this/should/be/secret) isn't it?

If your expectations is encrypt/encode the url and should be visible
to authorized user only, it's more possible.

> 
> Thanks Sachin
> 
> Posted at Nginx Forum:
> https://forum.nginx.org/read.php?2,273311,273311#msg-273311
> 
> _______________________________________________ nginx mailing list 
> nginx at nginx.org http://mailman.nginx.org/mailman/listinfo/nginx
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=hU4o
-----END PGP SIGNATURE-----