)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":10295,"name":"mariam john","email":"mariamj@us.ibm.com","username":"mariamj"},"change_message_id":"653a4f3e7e49b6dedc86c9597f0e92545f93616a","unresolved":false,"context_lines":[{"line_number":9,"context_line":"Currently all backups are encrypted using a static key. This spec aims"},{"line_number":10,"context_line":"to add the ability for a user to provide a backup encryption key."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"Change-Id: If2610ca2915b53eda8eb320a3343258618bf0620"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"7a016987_3599f379","line":12,"updated":"2015-05-29 15:55:47.000000000","message":"Missing blueprint reference.","commit_id":"ff0bb4d4391566e726d9d3c0da47b71945fce0a8"}],"specs/liberty/backup-encryption-keys.rst":[{"author":{"_account_id":10295,"name":"mariam john","email":"mariamj@us.ibm.com","username":"mariamj"},"change_message_id":"653a4f3e7e49b6dedc86c9597f0e92545f93616a","unresolved":false,"context_lines":[{"line_number":147,"context_line":"Work Items"},{"line_number":148,"context_line":"----------"},{"line_number":149,"context_line":""},{"line_number":150,"context_line":"TBD"},{"line_number":151,"context_line":""},{"line_number":152,"context_line":"Upgrade Implications"},{"line_number":153,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a016987_b536034f","line":150,"updated":"2015-05-29 15:55:47.000000000","message":"Wondering why this is TBD? Does this blueprint need more discussions.","commit_id":"ff0bb4d4391566e726d9d3c0da47b71945fce0a8"},{"author":{"_account_id":9664,"name":"amrith","email":"amrith.kumar@gmail.com","username":"amrith"},"change_message_id":"153e1e942ebbc4ee39ad6dd0d4622dcbe65a9f63","unresolved":false,"context_lines":[{"line_number":147,"context_line":"Work Items"},{"line_number":148,"context_line":"----------"},{"line_number":149,"context_line":""},{"line_number":150,"context_line":"TBD"},{"line_number":151,"context_line":""},{"line_number":152,"context_line":"Upgrade Implications"},{"line_number":153,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"5afe65bd_e6a7aa4d","line":150,"in_reply_to":"7a016987_b536034f","updated":"2015-06-02 17:36:24.000000000","message":"Yes, I was reluctant to put a whole detailed list here when it wasn\u0027t clear whether the community would go for this approach or not.","commit_id":"ff0bb4d4391566e726d9d3c0da47b71945fce0a8"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"a7bad4b9f0a97254de289aad433291cc11937315","unresolved":false,"context_lines":[{"line_number":27,"context_line":"Problem Description"},{"line_number":28,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"Currently the Trove backup and restore feature encrypt a backup using"},{"line_number":31,"context_line":"openssl and a static key (backup_aes_cbc_key) if"},{"line_number":32,"context_line":"backup_use_openssl_encrypt is set to true."},{"line_number":33,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"5afe65bd_6c81594a","line":30,"updated":"2015-06-02 18:08:26.000000000","message":"features*","commit_id":"0e41f4c9b5b065a15e23e515497e8868ace7144a"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"a7bad4b9f0a97254de289aad433291cc11937315","unresolved":false,"context_lines":[{"line_number":46,"context_line":"The proposal is that Trove (no longer) use the static system-wide key"},{"line_number":47,"context_line":"for backup encryption. Rather, when a user attempts to launch a"},{"line_number":48,"context_line":"backup, it should accept a pass-phrase from the user and use that as,"},{"line_number":49,"context_line":"or in the generation of a backup key. When the user wishes to launch a"},{"line_number":50,"context_line":"new instance based on a backup, the user will be required to provide"},{"line_number":51,"context_line":"the key."},{"line_number":52,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"5afe65bd_8cf3750a","line":49,"updated":"2015-06-02 18:08:26.000000000","message":"of,","commit_id":"0e41f4c9b5b065a15e23e515497e8868ace7144a"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"a7bad4b9f0a97254de289aad433291cc11937315","unresolved":false,"context_lines":[{"line_number":84,"context_line":"Public API"},{"line_number":85,"context_line":"----------"},{"line_number":86,"context_line":""},{"line_number":87,"context_line":"The backup-create and create API calls require a new parameter:"},{"line_number":88,"context_line":"backup_encryption_key."},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"Public API Security"}],"source_content_type":"text/x-rst","patch_set":2,"id":"5afe65bd_ccd3ad37","line":87,"updated":"2015-06-02 18:08:26.000000000","message":"Change \u0027require\u0027 to \u0027accept\u0027 as it is optional.","commit_id":"0e41f4c9b5b065a15e23e515497e8868ace7144a"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"a7bad4b9f0a97254de289aad433291cc11937315","unresolved":false,"context_lines":[{"line_number":101,"context_line":"In the absence of a multi-step exchange between the client and the API"},{"line_number":102,"context_line":"service which would lend itself to a secure exchange of a password, we"},{"line_number":103,"context_line":"propose the use of a simple reversible cipher, and to rely on the"},{"line_number":104,"context_line":"security of the underlying transport."},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"Python API"},{"line_number":107,"context_line":"----------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"5afe65bd_4c40dda5","line":104,"updated":"2015-06-02 18:08:26.000000000","message":"I\u0027m curious how you plan to implement the reversible cipher in such a way that makes it useful, if we are already trusting the underlying transport.","commit_id":"0e41f4c9b5b065a15e23e515497e8868ace7144a"}]}