Implement Secure Storage and Ensure Encryption of Sensitive Data at Rest and in Transit #14
Open
Description
The current system lacks robust security measures, leaving sensitive data vulnerable to unauthorized access both during storage and transit. It's crucial to implement encryption techniques to safeguard this data and maintain the trust of our users.
Data Encryption at Rest:
Implement strong encryption algorithms (e.g., AES-256) to encrypt sensitive data stored in databases, files, and any other storage systems.
Ensure encryption keys are stored securely
Data Encryption in Transit:
Enforce the use of HTTPS (SSL/TLS) for all communications between clients and servers.
Disable outdated and vulnerable encryption protocols and ciphers.