Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Interesting.

I’m still building my automation platform product and looking to encrypt my data going into db.

In my case I’m using Go for the backend applications. Any suggestions there?

Also do you suggest I do per user level keys or organization/workspace level?

Working solo and there’s a lot I don’t know. Happy to learn, thanks!



Encryption of records should be tied to their location (table + column + row) in the DB, preferably using AEAD methods. This helps mitigate Confused Deputy attacks:

https://soatok.blog/2023/03/01/database-cryptography-fur-the...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: