3 ms·
Maybe this is more interesting than I initially thought. I was thinking this would just the encryption keys used to store the information for your whole organiz
by jpalomaki 8y ago
Maybe this is more interesting than I initially thought. I was thinking this would just the encryption keys used to store the information for your whole organization Slack account. Instead, the keys seem to be much more granular, since you can revoke access to a single file, specific channel, workspace or organization level. [1]
I see one benefit of this being able to securely throw away data. Like if you are doing work for customer XYZ and chatting about it on the corresponding channel you can throw away the keys for the channel when the project ends.
Wonder how all this granularity works together with the search functionality. Or maybe they maintain per channel search index that can be covered by a separate key.
[1] https://slackhq.com/enterprise-key-management https://slackhq.com/enterprise-key-management
- paulddraper 8y ago> Wonder how all this granularity works together with the search functionality. Having implemented a similar system, I too greatly wonder that this. My guess is they keep it in memory (e.g. ElastiCache) and populating the cache would require the keys.