News for hackers. Stuff that matters.

A comment on Ask HN: Protecting database information?. Parent comment

Re:Ask HN: Protecting database information? by coo1k on Wednesday June 15, 2016 @01:14PM (#11910590)
OR you could encrypt user password with your public key. Then when you login, you can decrypt user password with your private key. Then go on decrypting user information with that password. This way you won't have to make copy of information posted by users and still will be able to view it with admin login.
[ Parent | on HN ]
Re:Ask HN: Protecting database information? by zimpenfish on Wednesday June 15, 2016 @03:30PM (#11911499)
Doesn't that mean anyone who captures the "admin" private key has full access to the database?
[ Parent | on HN ]
Re:Ask HN: Protecting database information? by coo1k on Wednesday June 15, 2016 @04:51PM (#11912062)
Yes, but since the key resides with admin and not on server, I am assuming the private key will be stored securely.
[ Parent | on HN ]