4 ms·
If you log all payloads now your logs are subject to DPA and possibly also PCI - potential security fail.
by medains 10y ago
If you log all payloads now your logs are subject to DPA and possibly also PCI - potential security fail.
- nitrogen 10y agoThat was one thing I noticed as well; selective logging of request parameters is safer, but requires more effort.
- tomcam 10y agoWhat are DPA and PCI?
- eriknstr 10y agoPCI is probably refering to https://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard https://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Sec... DPA might be https://en.wikipedia.org/wiki/Data_Protection_Act_1998 https://en.wikipedia.org/wiki/Data_Protection_Act_1998
- nradov 10y agoAnd HIPAA privacy regulations for PHI/PII, if you're dealing with healthcare data.