5 ms·
That protects the data between the browser and the web server (or SSL offloader) from eavesdropping and tampering. It does not protect against the case where th
by wglb 9y ago
That protects the data between the browser and the web server (or SSL offloader) from eavesdropping and tampering. It does not protect against the case where the attacker gains authorization, over HTTPS, to administrative access at the web server.
- paulddraper 9y agoRight. So what hypothetical encryption was cody8295 referring to?
- FuckOffNeemo 9y agoAs stated above, the data was not encrypted at rest.
- paulddraper 9y agoEncrypting at rest wouldn't have solved anything. They didn't steal the disk. They gained access to the web server, which would have access to the unencrypted data.