3 ms·
The get operation provides parts of the key used to decrypt the data you are after. No key, no data. Edit: the key comes from the user, its not stored anywhere
by reza_n 9y ago
The get operation provides parts of the key used to decrypt the data you are after. No key, no data.
Edit: the key comes from the user, its not stored anywhere on a server. The key can optionally never leave the user's device.
- rhizome 9y agoIf someone drains your db, do they get the keys along with it?
- vehementi 9y agoNo, of course you would not store those keys in that database.
- kabdib 9y agoI guess you can have a key-per-row, or key-per-partition, and throttle and monitor access to that key. This isn't going to make operations like database indexing or joins very happy, so you're probably limited to payload-level data; hard to judge if that's okay since I don't know the requirements for the schema. This presupposes you know what you're doing, security-wise, on your network, and with your backups, and with temporary data on servers. All of your interior traffic is encrypted, right? Right. It doesn't sound like Equifax was even on the map.
- usaphp 9y ago> Edit: the key comes from the user, its not stored anywhere on a server. The key can optionally never leave the user's device. Does it mean if user loses his key - he wont be able to get access to his data?