i *must* store third party credentials in my database. best way?

前端 未结 4 1006
野的像风
野的像风 2020-12-10 16:52

My app must read an SSL url from a third party. How do I best store the third party credentials in my own database, which protects the third party credentials from being com

4条回答
  •  遥遥无期
    2020-12-10 17:30

    How are the credentials being used? If their use is only triggered by the original owner (eg. you're storing a bank card number and they're making their 2nd purchase) then they can provide a password at that point which is used as your encryption key. You would then never need to store that key locally and the database content alone is useless to an attacker.

提交回复
热议问题