search

denishpatel / pygmy

Pygmy: Saving AWS Bills on Standby DB Servers
5 stars 1 forks source link

credentials are stored in engine_dbcredentials in plaintext #37

Closed benchub closed 3 years ago

benchub commented 3 years ago

I understand that it's just obfuscation if the keys in the db are encrypted with a key stored in the same app that is using the db, but even that would be better than plaintext credentials in the db.

denishpatel commented 3 years ago

@AadiMehta We should store DB password encrypted. we can use pgcrypto to encrypt/decrypt

AadiMehta commented 3 years ago

@denishpatel @benchub Agreed, let me think over this.

denishpatel commented 3 years ago

This is fixed