Component: Encrypted submission store

Defined in model.py:176

Submissions encrypted to the instance pubkey, at rest on disk.

boundary: Application Server encrypts at rest is hardened stores submissions uses network

Threats Affecting This Component

Threat Status Risk After mitigations Mitigations
Application server full of submissions THREAT108 partially mitigated 6 medium 6 medium SecureDrop submissions limited to 500 MB; Source interface only available as a Tor onion service; OSSEC alert sent when server almost full

Scenarios Using This Component

Back to Components List | Back to Summary