3 ms·
Yeah, they should encrypt the token. They should encrypt the encryption key as well. But the key to decrypt the encryption key is OK to store in plaintext, beca
by sowbug 10y ago
Yeah, they should encrypt the token. They should encrypt the encryption key as well. But the key to decrypt the encryption key is OK to store in plaintext, because by that point attackers will have lost interest.