Timeline for How to securely store users API keys submitted through client
Current License: CC BY-SA 4.0
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 18, 2023 at 7:31 | comment | added | pzrq | FWIW a few years later, as the original post is tagged with MongoDB, it's also worthwhile recommending Client-Side Field Level Encryption. Though by "client" the MongoDB docs don't mean something like a web browser making POST requests, they mean the bit that connects from the OP's "backend" to the MongoDB deployment. Depending on the threat model (which we don't have), API keys could well be more valuable than passwords so may deserve an equal or better level of protection. | |
| Sep 20, 2022 at 21:23 | history | answered | Tomachi | CC BY-SA 4.0 |