3 ms·
So you have per-row or perhaps per-user keys? Do you back them up?
by areyousure 6y ago
So you have per-row or perhaps per-user keys?
Do you back them up?
- jacquesm 6y agoNot currently running a user visible service. Fortunately. The one I did run was started in 1998 and had turned into a very large pile of super insecure PHP and was shut down. If I were to start a user visible service today I would think really long and hard about whether or not the kind of superstructure required would be offset by the potential gains. The web is no longer a place for amateur projects with a focus on the happy path, you need to do it all 'just so' or you can expect to be compromised. And doing it right isn't simple nor is it cheap.
- areyousure 6y agoSorry, what I meant was to clarify your proposal, not to ask what you literally do now. I'm wondering, more or less, whether the key management is another case of backups and deletion being hard.
- jacquesm 6y agoAh, apologies. Key management is indeed just another - hopefully simpler - version of the same problem. The reason why it simplifies things is because a single key can invalidate a lot of data stored in places that are out of reach such as cold backups. But you still have the same essential problem.