MaxGabriel – WindowsTechs.com

How helpful is encrypting/decrypting information on an app-server, and sending it to the database encrypted?

Posted on July 24, 2018 by MaxGabriel

I just added some code to our app server to encrypt personal information before it’s stored in the database. This was mostly done for compliance reasons, but how much of an actual security win is it?

I hear about database du… Continue reading How helpful is encrypting/decrypting information on an app-server, and sending it to the database encrypted?→

When implementing CORS, should I check for a correct HOST header in my webapp?

Posted on July 12, 2018 by MaxGabriel

I have a backend web server that serves an API (over HTTPS) to a frontend web server on a different subdomain. It uses CORS to allow this.

The CORS spec directs you to not send the CORS headers if the origin isn’t present or… Continue reading When implementing CORS, should I check for a correct HOST header in my webapp?→