Should Confluence connection to PostgreSQL be encrypted over SSL on single system?

[Jesse_Norris]

I have a single system for a small group of people running Confluence and its associated PostgreSQL database. Care has been taken to provide appropriate permissions to the Confluence installation, the PostgreSQL installation, and the PostgreSQL database itself. The external connection to Confluence itself has been secured with SSL, however the connection between Confluence and PostgreSQL has not yet been secured with SSL.

On a single system is there a cybersecurity concern to encrypt the connection between Confluence and its local database?

Is there any concern that a local user without admin permissions could listen to the unencrypted connection here?

[Alexis Robert]

Hi @Jesse_Norris , 

I don't believe that it's a big concern if the data is not encrypted between your application and local database. 

Let me know if this helps,

--Alexis

[Jesse_Norris]

Thanks, Alexis. That's what I was thinking, but I wanted a second opinion.