5 ms·
One worry I have is with sensitive data e.g. HIPAA protected information. How do you guarantee that the data is safe at rest. Are there encryption at rest optio
by tr33house 5y ago
One worry I have is with sensitive data e.g. HIPAA protected information. How do you guarantee that the data is safe at rest. Are there encryption at rest options? With online-first applications, you can just expire the sessions after x minutes and lock users out once their permissions change. How hard is it to do something like this in practice for an offline-capable web-app?
- upofadown 5y agoEncryption at rest is generally easier and more secure than encryption in flight. It eliminates whole classes of oracle and downgrade type attacks.
- lytefm 5y ago- You can do the encryption at rest on the OS level, e.g. with LUKS. Cloudant does that. - You can also lock out users in Offline-first apps when a session expires or permissions are removed. Not difficult with CouchDB and certain libraries.