3 ms·
Awesome project, but I'm not a fan of alphanumeric strings used as raw key bytes for AES: https://pocketbase.io/docs/going-to-production/#enable-settings-encry
by BoppreH 11mo ago
Awesome project, but I'm not a fan of alphanumeric strings used as raw key bytes for AES:
https://pocketbase.io/docs/going-to-production/#enable-settings-encryption https://pocketbase.io/docs/going-to-production/#enable-setti...
https://github.com/pocketbase/pocketbase/blob/90d896e1cc49e3535dad95718dada3f7efcef4ca/tools/security/encrypt.go#L15 https://github.com/pocketbase/pocketbase/blob/90d896e1cc49e3...
The developer doesn't consider this a security issue. I hope they reconsider. Non-standard cryptography is a minefield.