-
Separating Services
Changes were made to store the secrets in a separate database rather than a JSON file to allow scalability and portability. An initial design had setup an over-engineered system for an enterprise. Then it was simplified, and further normalized. Read More
-
Secure Database / Vault
I venture on a path to evaluate the cryptographic features available on my shared hosts database, tests its weaknesses, setup auditing, and perform encryption outside of the database while storing keys in a secrets manager. Read More
-
Keeping Secrets
Read as I evaluate where secrets can be stored, and setup a bare-bones secret management interface where secrets are encrypted and stored in a file outside of the websites html directory that isn’t accessible to FTP. Read More
-
Encryption Anxiety
Encryption Anxiety I have setup my reports to communicate with XOR encryption. The algorithm is weaker than anything I’ve worked with before. I want to find an open-source license free encryption algorithm that I may use. XOR just isn’t cutting Read More