Note that there are some explanatory texts on larger screens.

plurals
  1. USJason Dean
    primarykey
    data
    text
    plurals
    1. This table or related slice is empty.
    1. COI'm sorry, but using a global protection system (like a simple script or even a full blown WAF) in addition to properly coding your application is not overkill and there is nothing to suggest that following such a principle will "lead to overkill". Defense in depth will help to protect our applications when one system fails. Sure, you could go and Reductio Ad Absurdum and say that we could add a hundred layers and that that would be overkill, but no one has suggested that. YOU however stated that these two layers were overkill, and that is just plain wrong.
      singulars
    2. CODown-voted because I think this is terrible advice. Saying that the key is not critical is not only wrong, it is completely opposite of the truth. The key is the most important part (assuming a strong algorithm) in the cryptosystem. And using a non-random, easily deduced key is a terrible idea.
      singulars
    3. COSorry, but I don't agree that those articles offer any evidence that it is a good idea to encrypt email in the DB. Are you going to encrypt first and last name too? Home address? Zip Code? Phone? Maybe just encrypt everything in your users table. But all you're going to accomplish there is slowing down your application. You could encrypt at the database level. That would help protect data from some compromise without greatly affecting performance.
      singulars
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload