3 ms·
Compliance: all internal traffic must SSL too! Reality: Cert errors, cert expiry, stuff starts breaking Compliance: Encryption at rest! Me, designing for AWS:
by nuker 5y ago
Compliance: all internal traffic must SSL too! Reality: Cert errors, cert expiry, stuff starts breaking
Compliance: Encryption at rest! Me, designing for AWS: wtf?!?
- jjav 5y ago> Compliance: all internal traffic must SSL too! Let's not forget that by not encrypting internal connection is how google internal traffic was stolen by the NSA (see Snowden revelations), which is why they now (reportedly, I'm not there) encrypt everything in transit.
- nuker 5y agoYea, I use AWS, subnets, Sec Groups, IAM Roles, different case