Allow viewing of Encrypted Messages/properties to be viewed in plain text

[dessam1]

Describe the feature.

Is your feature related to a problem? Please describe.

We use the Encrypted Properties feature heavily to ensure that PII and other sensitive information is encrypted in transit. In Service Insight we created a custom view that allowed our support team to debug errors in message payloads by viewing the message in plain text. With Service Insight being sunset it would be useful to be able to do this in Service Pulse meaning we don't need to create utilities outside of Service Pulse and distribute these.

Describe the requested feature

An idea to implement this would be a new tab, that's visible when viewing a failed/audited message that is locked behind permissions (such as the ability to retry/edit messages etc). The tab should only be visible if the user is in the right security group and if the message has the appropriate headers added by the NSerivceBus property encryption libraries. It should be the same view as the message body view, but with the properties unencrypted (a regex or similar could be used to identify encoded strings)

The difficulty is around the encryption keys, there might need to be a configuration section that users can put an array of keys in so that the viewer can cycle through them attempting to decrypt.

Describe alternatives you've consider

We have created console apps/utilities that our support team can use, however, it's clunky and takes them out of ServicePulse creating overhead. As the encryption of properties is supported by the NServiceBus framework, it would be ideal if the supporting tooling did too.

Additional Context

I'd be happy to share out (admittedly simple) implementation of this custom view for Service Insight if that helps the team.

Related Discourse post

[WilliamBZA]

Thanks for the idea. While there is value in having the ability to view encrypted message bodies/properties within ServicePulse, there are many, many steps that we'd have to take before we're in a position to be able to add this functionality.

We'll keep this feature request open, but to set the correct expectation: an actual implementation of this is unlikely to be any time within the next 3-5 years at least.

[afprtclr]

it's clunky and takes them out of ServicePulse creating overhead

If taking out of ServicePulse is bothering enough, you might consider implementing your custom GreaseMonkey/Tampermonkey script as a workaround.