3 ms·
The article doesn't make it clear what sort of security features the author would like to see in NoSQL databases beyond SSL support, which they then admit is of
by haldean 15y ago
The article doesn't make it clear what sort of security features the author would like to see in NoSQL databases beyond SSL support, which they then admit is offered by MongoDB's "commercial offering". Never mind that the commercial version is, I'm assuming, the one that is used by all of the financial institutions the author is worried about.
I'm curious though -- what security features (if any) does HN think NoSQL DBs are missing?
- hughw 15y agoExactly -- for his example of a financial services system, just buy the commercial version, or tunnel using ssh. You can also encrypt the underlying file system using your OS's tools. I can't speak to how financial institutions use, say, Oracle's authentication and authorization. Most web apps & services use their own logic to manage access control. I'd love to hear what someone form that industry has to say. (An "architect" preferably. Not a mere "developer", who are the cause of this whole security problem ;) ).