3 ms·
> If you really believe in true end-to-end encryption, then having this webserver in the middle is a bad idea: you should route requests directly to database se
by JshWright 10y ago
> If you really believe in true end-to-end encryption, then having this webserver in the middle is a bad idea: you should route requests directly to database servers and ensure that at no point does any non-database computer have a decrypted copy of the information that will eventually be rendered to the user.
I can't say I haven't considered abusing PL/pgSQL to that point... ;)
- _jal 10y agoI've actually seen that done - HTML straight out of a stored procedure. Really awesome <TR BGCOLOR=...><TD> stuff. I've mostly recovered from the experience, thanks, although I do have occasional flashbacks.