ariandanim
How to protect all data in Postgresql? Encrypt everything?
Dear All Team,
Due attacker Will always more ways to breach data, how to encrypt all data information every rows, because as I know, only password has encryption feature when in the database the password showing in random data, but attacker not targeting password as we know they Will also get all information.
I mean, does any library that can protect all data include email, date of birth, address, and so on (all data in Postgresql is become random code/salt)
Most Liked
hauleth
Encrypting everything (not at rest) doesn’t really make sense, as if attacker gains RCE, then you have lost, and it is irrelevant to the fact that you have or have not encrypted everything. And encrypting everything mean that you cannot do queries against such DB without decrypting data, which mean that each query need to have access to decryption key, which makes whole encryption moot.
The good approach there would be to not store information that you 100% need. From my experience a lot of services do not need DoB or physical address at all.
kokolegorille
Popular in Questions
Other popular topics
Latest Phoenix Threads
Latest on Elixir Forum
Sponsor Spotlight
We build reliable cloud platforms for business-critical systems.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #deployment
- #library
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #channels
- #elixirconf
- #exunit
- #discussion
- #code-sync
- #javascript
- #podcasts
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixir-ls
- #phoenix_html
- #iex
- #blog-post
- #graphql
- #genstage
- #ai
- #websockets
- #supervisor
- #elixirconf-us
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #metaprogramming
- #security
- #hex
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Practical resources that improve the lives of professional developers.
Develop your skills with books, videos, and courses.
Producing high quality Elixir screencasts since 2017.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"