Encrypting the persisted email address

[cfly83]

Hi,

Is there any way of easily encrypting the persisted email address in the customer_user table, and any other places its stored (article table I'm looking at you) within OTRS (version 3.2).

A quick scan through the admin docs proved fruitless and I dont want to start redeveloping sections of code needlessly.

Thanks,
Chris.

[jojo]

why should it be encrypted? The data is only accessible by agents.

who should decrypt the data for which purpose later on?

[crythias]

I think he's concerned about rogue entity grabbing the database and accessing email addresses.

Unfortunately, I can't see how encrypting email addresses is going to be useful, even for data dump reasons.

Unlike passwords, which don't need to be reversed, any encryption is more obfuscation than encryption, because it is required to be able to reverse the encryption to reply to the customers.

It would not be unreasonable to observe any email address in a table and reverse obfuscate the email addresses using the same manner that is available via the source code of OTRS.