Collaborate Disseminate
I am thinking about using a vps on a hosting provider that does not offer cloud services like kms, or vpc on for example AWS for a webapp. The webapp will need to encrypt some sensitive data in the database.
When comparing the vps and vpc,… Continue reading Is handling keys with vps without kms secure?
I am looking for a secure (and as easy as possible) way to store my encryption key.
I have been looking at some services that will hold the key for you and then you can retrieve it with an api. The idea is that they store it safely and on … Continue reading Is api encryption key vault services really secure?
I am not using AWS, google cloud or similar. I have a vps on another webhosting service.
I am going to encrypt my data but don’t know where the best place to save the encryption keys would be?
I can see that AWS has cloudHSM, Google uses … Continue reading Alternative to AWS CloudHSM? [closed]
I have been reading a lot about where you should store your JWT tokens for web applications. Local storage and cookies has its pros and cons.
So I thought that maybe it could be a good idea to instead create 4 tokens? 2 access tokens and 2… Continue reading Security idea for storing JWT tokens, is this a good idea?
I am trying to implement JWT in a secure way in Node.js and I am unsure when to request the refresh token.
I got one access token and one refresh token. Both are saved in two httpOnly cookies. When the access token expires the refresh toke… Continue reading When to request refresh token? JWT
I need to save very sensitive data from an Excelfile that the user uploads. The data will then be saved to mySQL. All is done in Node.js.
Now I wonder what is the most secure way to upload the file.
Should I use Multer (https://expressjs.c… Continue reading Uploading sensitive data, Should I user memoryStorage (buffer) or save and delete file?