3 ms·
There should be (authenticated) differentiations between what the credit agency does, what you do, and what third parties do.
by tylersmith 9y ago
There should be (authenticated) differentiations between what the credit agency does, what you do, and what third parties do.
- breischl 9y agoOne could have a signed audit log, and that's fine. But no matter what you do the CRA has to be able to write to the data, and read from it to give it to third parties, and be able to reset passwords. AFAIK that requires that they have the keys to decrypt the data.