3 ms·
Just curious -- how are you guys storing all this super-personal information, or is it ephemeral while you make API calls to various insurance provider backends
by yid 15y ago
Just curious -- how are you guys storing all this super-personal information, or is it ephemeral while you make API calls to various insurance provider backends? That's quite the identity theft kit that I'm being asked to upload to a site called "leaky".
- darrennix 15y agoThe information is transmitted via HTTPS to the carrier. Once your session on Leaky ends, the data is gone -- there is no data store.
- yid 15y agoInteresting -- so are you ruling out the possibility of storing the data in the future for features like periodically checking for updates in my rate? That sounds like a killer feature (that I would even be willing to pay a subscription for), but then I'd also want to be damn sure that you're storing that data well. EDIT: in fact, for a subscription based service, you could figure out the optimal pricing quite easily. If the annual price of your subscription were less than the typical insurance savings by having it monitored, you'd have a hell of a business model.
- jasontraff 15y agoYeah -- we'd certainly love to, but we didn't think that we'd be able to securely store the data at the moment -- so we didn't want to risk it. That's absolutely a feature that we'd like to implement though!
- lurker19 15y agoProtip: Consumers don't care about security.
- qeorge 15y agoThat implies you're keeping such information with my session (across requests). Is that the case? I may just be misunderstanding. If so, you need to encrypt it first. Storing sensitive data in the user's session is akin to writing it to disk in plaintext.