28 ms·

Looks great and comes in perfectly in time for me. One concern: All my data incl. CV is stored plainly in the cloud, correct?

• romanhn 3y ago
  Thanks! I suppose the answer depends on what you mean by "plainly in the cloud" :) It is indeed stored in Amazon's RDS, which is a managed service. I approached this as a real product rather than a weekend project when it comes to security (application and infrastructure) and there is a lot in place protecting the data - Firebase's jwt auth, XSS and SQL injection protection, default passwordless logins, data encrypted at rest, database in private subnet, DB credentials in a secrets vault with automatic rotation, multi-factor auth for all of my access to infra, probably a bunch more. Are there specific concerns not addressed here?
  • or113 3y ago
    Have you done any penetration testing?
  • jdthedisciple 3y ago
    Thank, that sounds great and fairly secure. I love your tech stack btw - C# backend is Elite (my main stack)!