[Glass] data encryption

[Richard Sargent via Glass]

On Thu, Feb 19, 2015 at 11:17 AM, Sebastian Heidbrink via Glass <
glass at lists.gemtalksystems.com> wrote:

> Hi!
>
> I was asked if there is a way to prevent the Gemstone/Glass hoster from
> seeing the data...
>

It's an axiom that if a black hat has "physical access to the machine", he
has everything. If you are worried at that level, you need to provide your
own data centre.



>
> Is there a common practice to encrypt certain attributes/data?
>

It is always a good idea to store critical, sensitive information encrypted
(SIN, SSN, credit card, password, etc.).

If you are worried about visibility of the data enroute, use https.



>
> I guess this is a problem that might just occur on the Seaside/ZincRest
> cloud-ish projects?!
>
> Sebastian
> _______________________________________________
> Glass mailing list
> Glass at lists.gemtalksystems.com
> http://lists.gemtalksystems.com/mailman/listinfo/glass
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.gemtalksystems.com/mailman/private/glass/attachments/20150219/1820eb6a/attachment.html>