https://github.com/osquery/osquery logo
Title
a

Adrian Junge

12/01/2022, 2:56 PM
Hello everyone, is it possible to manipulate the data sent from a Fleetclient to the central Fleetserver? Or is the integrity of the data guaranteed and if so how?
j

Jörg Sachse

12/01/2022, 4:00 PM
Hi Adrian, I'm a beginner myself, but as far as I understand it, data from osquery (the "Fleetclient") to the FleetDM server is encrypted using TSL certificates, so the parties speak HTTPS amongst each other. Also, if there was a way to manipulate the data during transfer, that would kinda defeat the whole point of FleetDM.
k

Kathy Satterlee

12/01/2022, 4:40 PM
You understand correctly, @Jörg Sachse 🙂 By default, traffic to and from Fleet is encrypted with TLS. As long as you haven't bypassed that in some way, you're good to go. https://fleetdm.com/docs/using-fleet/application-security#sensitive-data-exposure-encryption-in-transit-at-rest-improperly-implemented-ap-is
a

Adrian Junge

12/01/2022, 9:39 PM
Thank you very much!