home.social

#dataatrest — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #dataatrest, aggregated by home.social.

  1. Okay #InfoSec and #DBA types... What's your opinion on encryption key rotation for things like #databases and #dataatrest

    Does rotating keys buy you any additional security? Or does it give adversaries a better chance at finding a working key with which to decrypt any data they find?

    If you keep the key database local to the machine, compromise of the machine means compromise of all the encryption keys... so what's the point?

    Am I missing something?

  2. Okay #InfoSec and #DBA types... What's your opinion on encryption key rotation for things like #databases and #dataatrest

    Does rotating keys buy you any additional security? Or does it give adversaries a better chance at finding a working key with which to decrypt any data they find?

    If you keep the key database local to the machine, compromise of the machine means compromise of all the encryption keys... so what's the point?

    Am I missing something?

  3. Okay #InfoSec and #DBA types... What's your opinion on encryption key rotation for things like #databases and #dataatrest

    Does rotating keys buy you any additional security? Or does it give adversaries a better chance at finding a working key with which to decrypt any data they find?

    If you keep the key database local to the machine, compromise of the machine means compromise of all the encryption keys... so what's the point?

    Am I missing something?

  4. Okay #InfoSec and #DBA types... What's your opinion on encryption key rotation for things like #databases and #dataatrest

    Does rotating keys buy you any additional security? Or does it give adversaries a better chance at finding a working key with which to decrypt any data they find?

    If you keep the key database local to the machine, compromise of the machine means compromise of all the encryption keys... so what's the point?

    Am I missing something?

  5. Okay #InfoSec and #DBA types... What's your opinion on encryption key rotation for things like #databases and #dataatrest

    Does rotating keys buy you any additional security? Or does it give adversaries a better chance at finding a working key with which to decrypt any data they find?

    If you keep the key database local to the machine, compromise of the machine means compromise of all the encryption keys... so what's the point?

    Am I missing something?