Hot answers tagged

10

Considering that TLS is in place with a solid configuration (i.e. certificate pinning), which I find no reason not to, you'd need to work out the business risk you're trying to mitigate by encrypting this information. Ask yourself, what would you gain by doing this? What type of attack vectors are you mitigating? How are you going to generate, distribute ...


2

One of the points of TLS is to solve this problem - a secure way to transport data across untrusted networks, preferably using ephemeral keys for the actual encryption portion. Doing this yourself is possible but is coming dangerously close to "rolling your own" as you will have to solve problems like key storage, etc. Depending on how your backend network ...


Only top voted, non community-wiki answers of a minimum length are eligible