3 ms·
Encryption would have reduced the damage if encryption was done right. There's no reason for a front-end system to have access to SSN and with modern secure st
by adrr 9y ago
Encryption would have reduced the damage if encryption was done right. There's no reason for a front-end system to have access to SSN and with modern secure storage like Vault you can grant encryption(Write) and decryption(Read) rights specific to each app on your platform.
- tptacek 9y agoVault is designed for application configuration secrets, not for at-scale storage of raw business data.
- slackpad 9y agoThe transit backend can be used to encrypt more general business data - https://www.hashicorp.com/blog/transparent-data-encryption-in-the-modern-datacenter https://www.hashicorp.com/blog/transparent-data-encryption-i....
- bskap 9y agoHaving separate read and write permissions is entirely orthogonal to having encryption. That certainly would help (assuming the compromised system didn't need to have read permissions), but you don't need encryption to implement that and adding encryption doesn't imply that you've done it.