Without getting too deep into the architecture, I would like to get suggestions / good reads on applying encryption to a large scale application with multiple endpoints. There are internal and external REST services, we are using Kafka as a messaging bus, Mongo / Postgres for a datastore, web frontend, etc...

Some of these technologies offer encryption out of the box given some configuration. Most seem to be using certificates and some offer custom public / private key pairing. I understand encryption enough to know the differences but it becomes hazy when applying encryption across your entire solution.

Does it make sense to have one certificate that covers the entire application? I have plenty of questions that I would like to ask but I understand without a deeper understanding of the design of the solution, I am limited. I am hoping someone can point me to a good read.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.