10 ms·
> Use secure channels… When it comes to PII at my company, secure channels means "encrypted email only". No Slack, no Jira, no chat in video calls. That's jus
by lolinder 2y ago
> Use secure channels…
When it comes to PII at my company, secure channels means "encrypted email only". No Slack, no Jira, no chat in video calls.
That's just not feasible for 100% of communications.
- brigandish 2y agoThen use a time-limited token, you can assign it to a particular role or support engineer too. You could do fancy things like making it pronounceable… there are so many options that do not involve passing around keys (while fearing you might leak an email address, which is less worrying than the key, IMO).