I want this issue to be a place where we can at least discuss GDPR compliance

This is a new feature in Varnish version 6 - which is still in limited release.

I think this is going to be a long conversation... but to start:-

https://info.varnish-software.com/blog/varnish-6.0

Varnish Total Encryption - supporting PCI and GDPR compliance, Varnish Total Encryption applies a unique encryption key to every cache object following the Advanced Encryption Standard AES-256. Each request is assigned one key based on the unique fingerprint of that request, ensuring that the visitor only has access to the very specific cache object. The feature is VCL-based and can be tailored to customers’ specific needs. Currently this is limited to beta-testers. Interested Varnish users should contact Varnish Software for more information.

https://info.varnish-software.com/blog/introducing-varnish-total-encryption

Comments

martin107 created an issue. See original summary.

misc’s picture

misc commented
Status: Active » Closed (works as designed)

Have not looked closer to this, but reading about it at the varnish blog, it seems that nothing needs to be implemented in the module if using GDPR encryption, correct me if I am wrong, but closing this for now.