A new post on Message Level Encryption has been posted recently. Have a look !
This helpful and super timely, as we part of deploying BF, we plan to just enable for the whole environment.
I am planning to have our TLRs handle the decryption. One thing I am not seeing is how to configure these servers to decrypt. I assume I need to copy over the private key from the master… is that correct?
Yes, copy the encryption key from the master to your relays.