Details
-
Improvement
-
Resolution: Won't Do
-
Major - P3
-
None
-
None
Description
The following documentation could possibly be interpreted to mean that the oplog is not encrypted when encryption-at-rest is enabled. However, my understanding is that the oplog would in-fact be encrypted if encryption-at-rest is enabled.
The particular phrase is: "Encryption is not a part of replication" .
https://docs.mongodb.com/manual/core/security-encryption-at-rest/#encryption-and-replication