Encrypting 3rd party credentials

前端 未结 3 1179
被撕碎了的回忆
被撕碎了的回忆 2021-01-13 19:14

I have an application where I need to store 3rd party credentials to services like Amazon S3, FTP, SFTP, etc..

I know that it is possible to access some of those sys

3条回答
  •  遥遥无期
    2021-01-13 19:54

    You need to investigate the use of keystores. TruCrypt is an example of such a keystore, but this is a personal keystore, not intended for service level credentials.

    You won't be able to avoid storing their passwords in a format that someone can get access to, the goal is to minimize who can access the information. Putting in the same MySQL as application data is asking for disaster.

提交回复
热议问题