This repository was archived by the owner on Sep 16, 2021. It is now read-only.

ServerBeneathTheSurface

Jump to bottom

Maxim Ermilov edited this page Sep 7, 2017 · 4 revisions

Cauliflower Vest Server

Runs on Google App Engine.
- Hosted entirely on Google's servers.
- Scales up and down to meet the demands of any enterprise.
- Globally accessible using any Internet connection and supports SSL.
- Google Account ClientLogin authentication.
Uses python2.7 App Engine runtime.
- This runtime natively offers libraries such as PyCrypto.
Encrypts recovery keys before long-term storage in Datastore, decrypts only when retrieved.
- Cryptography is handled by Keyczar.
- For more information on how to securely host encryption keys, see ServerKeys.
Restricts access to admin-defined groups of users. By default, the following groups are available:
- front-line-support : can retrieve keys using the GUI client only, with no web UI access. Key owner email notifications are active.
- admins : can retrieve keys using the GUI client and/or web UI. Key owner email notifications are active.
- security-team : can retrieve keys using the GUI client and/or web UI. Key owner email notifications are disabled.