Message Encryption Characteristics
FioranoMQ provides message encryption on 'per message' as well as on 'per destination' basis.
In 'per message' encryption, clients can enable or disable encryption for each message. 'Per message' encryption is done by a client before relaying data to the network. Decryption must be performed by the receiving client application prior to reading the message.
In 'per destination' encryption, all messages sent to a particular destination (topic or queue) are encrypted, thus providing a secure channel of delivery. A destination is marked as encrypted at the time of its creation. All messages published on this destination is delivered decrypted to subscribing applications. A client application, therefore, does not have to explicitly decrypt a received message.
Encryption involves only encrypting the payload of the message and not its JMS header. This allows usage of the same set of APIs associated with message headers as well as message selectors, irrespective of whether message encryption is enabled.