sdake / heat-jeos

The Heat JEOS tools
Apache License 2.0
6 stars 13 forks source link

Authentication credentials in database should be encrypted. #6

Closed imain closed 12 years ago

imain commented 12 years ago

It's not a good scenario for the authentication information to be held in the database in plain text. I did some reading on the topic and it sounds like the best solution for us would be to do symmetrical encryption with a key held in a readable-only-by-root file.

imain commented 12 years ago

Woops, wrong repo