Viewing profile — deidei

> reports that said the app will require a confirmation of identity, such as a driver’s license, your tax records to prove income and a signed form that says you are ready to get m…

yes, it is a typo from the independent. > Its driving my insane. Off topic, but you made another typo here lol

> The Royal Navy seems to advertise all levels of jobs on LinkedIn - and wider. Wasn't aware of this. Can you please link to some more similar job ads? Is this the standard in othe…

> why would it be bad to advertise the position? Not an expert but from what I understand a position of this level should ideally be filled internally by reassigning or promoting a…

Congrats to the team at ISRO! It makes me wonder, what is it that ISRO does differently than most other government agencies in India that makes them so efficient.

There you go https://archive.ph/fmQR9 Sorry I should probably have put the non-paywalled link in the submission

This is exactly what I was looking for! Thank you so much for the help.

>If your user can provide an encryption key, he can as well provide the token or whatever directly. Yeah that makes sense, thanks for pointing that out. I'm just brainstorming at t…

I was checking out the docs for that and a few other similar solutions too. This is very true. Most of the secret managers are primarily intended for config-like data.

Thanks for the help. So that two options that I was thinking about - Option A 1. My user creates an secure (with API keys or some other method) API endpoint to provide the Client s…

>What are you going to do to keep the key safe in the scenarios of your threat model where an adversary can access the DB contents? One option that I have been thinking is - 1. Whe…

I'm using PostgreSQL and it has a built in encryption library (pgcrypto), so I'll probably use that.

That does make sense, thanks. Do you store all the secrets using the Key Vault?

It would be better to store all the Client Secrets in such a Secrets Manager right? Or should I create an encryption key per user and store that in the Secrets Manager?

Hey, thanks for the reply. My application is a SaaS that helps developers add integrations (with apps like Slack, Linear etc.) to their apps really quick. What is the best way to s…

Thanks for the reply. I'm fully aware of the dangers of rolling my own and want to avoid it at all costs. Is using a battle-tested Node.js library or the database's own API for enc…

>Specific answers to your questions will depend on your application and use cases (local network? global website? credit card data? health data? etc...) Thank you so much for the r…

Hey HN, I will need to store some sensitive data (API keys, Client Secrets) of my customers in my DB. I was wondering if anyone could help me with these questions. 1. What are the …