News for hackers. Stuff that matters.

A comment on August 2016 Incident. Parent comment

Re:August 2016 Incident by runesoerensen on Tuesday August 30, 2016 @07:41PM (#12394842)
Seems more likely that they use HTTPS and this is "just" an issue with cleartext logging (i.e. some server component logs unencrypted data after TLS termination).
[ Parent | on HN ]
Re:August 2016 Incident by tomschlick on Tuesday August 30, 2016 @07:43PM (#12394849)
I think OP is referring to client side encryption instead of encrypting it on the server for storage.
[ Parent | on HN ]
Re:August 2016 Incident by runesoerensen on Tuesday August 30, 2016 @07:47PM (#12394871)
You're right, that makes more sense
[ Parent | on HN ]