Tag Info

Hot answers tagged

2

Depends....easy way is to simply ask the I.T. department: You: hi, I'm curious if our IM chats and emails are backed up or stored for compliance reasons. If I need to recover a chat from google hangouts for legal reasons, is it possible? I worked in finance where 100% of all communication was recorded in our office as per government regulations including ...


2

Install a program like PGP, and save your public and private keys to your hard drive - specifically in your own login account. Encrypt the drive. When you try to decrypt it, it will require your private key. Don't copy the keys to any other source. Many dual-key encryption methods are good for this purpose. For the PGP example, there are whole disk ...


2

The first thing you should do is to ensure that all communication between your app and the server uses HTTPS rather than HTTP. This should protect you from casual packet inspection. To make this setup more secure, you may also consider using certificate pinning to prevent any man-in-the middle attacks involving a forged certificate for your site. If you are ...


1

No, new versions of TLS have not removed cipher suites defined in older versions.1 Which version of TLS you use and which cipher suite you use are two linked but separate matters (you can't always use a new cipher suite in an old TLS version). OpenSSL is just listing which version the cipher suites were first added in. The PRF is mostly used for key ...


1

The «reference browsers» are marked with an R in the table below. What results were you given there? The problem may be on some of them (IE?) not supporting those ECDHE_RSA_* ciphers.


1

First, do not bake the key into the binary. As Xander noted, a HSM is designed for this purpose such that a key is only accessible to the application and is not on the system. You may be able to setup a bastion host you locked down on a separate management network to serve this purpose instead, which is a little less secure. The next level would be to at ...


1

The location of the database is /var/lib/mlocate/mlocate.db or at /var/cache/locate/locatedb. This is outside your home folder. Probably you decrypted your homefolder prior to running the command and the results got saved in a non-encrypted folder.


1

If you want to protect against a key or other secret being exposed as the result of a system compromise, you would look to a HSM to perform cryptographic activities. Since the HSM is essentially its own little computer, the HSM would then have to be compromised, which is much more difficult. You may also use a distributed or n-tier architecture between the ...


1

In order to make a live database that encrypts its data, the database itself would have to have access to the keys. By that token, any admin could su into the account and find them. Your concerns are valid. Your idea of having the user present a secure key (RSA for example) if you have them do it over an SSH or SSL protected connection is not a bad idea. ...


1

The key to security is understanding attack vectors. Who is trying to get access to your data? It's a fundamental theorem that you can't ungive information. If a client has received data from your server, that can't be undone. Cryptography just makes sure that the right client receives information. In particular, "the app itself" is not something which you ...



Only top voted, non community-wiki answers of a minimum length are eligible