Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
UnicycleSkewer
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
3 ms
·
1.
▲
by
UnicycleSkewer
6y ago
I guess that is true, but if you store the encryption key in a secret store on Azure or AWS, I wouldn't really worry about that. Maybe the real question is why use a pepper over encryption? They have the same downside (as you mentioned
2.
▲
by
UnicycleSkewer
6y ago
I wonder why it isn't best practice to hash with a salt and then encrypt the passwords using something like AES. The encryption key can be stored in the secrets manager and be injected via environment variables. Unlike a pepper it is p