Search code examples
securitysslencryptionrabbitmq

Is that safe to send sensitive data via RabbitMQ messages?


I need to send sensitive data via RabbitMQ. How messages are stored in queue, when ssl is used? Is it guaranteed that noone can get access messages without certificate or i need to somehow encrypt messages before insert?


Solution

  • SSL only guarantees enctryption in flight (in traffic), not at rest (storage). RabbitMQ as far I recall doesn't encrypt the storaged messages.

    You cloud use either encrypted storage in the infrastructure level or encrypt the messages on the application level.