News for hackers. Stuff that matters.

A comment on Swipe Left: Privacy Practices of Online Dating Apps. Parent comment

Re:Swipe Left: Privacy Practices of Online Dating Apps by bogomipz on Saturday October 21, 2017 @01:27PM (#15522613)
From you link:

>"Servers use full disk encryption and the key must be manually entered at boot."

I am curious how do you handle key rotation and storage of encryption keys?

[ Parent | on HN ]
Re:Swipe Left: Privacy Practices of Online Dating Apps by the_stc on Saturday October 21, 2017 @07:26PM (#15524172)
Only a few people have access to the keys, plus a set of third parties (think lawyers) that have a shard of an SSS setup. Changing the boot key can be done now and then.

But we think it is feasible to drop the disks entirely for the main servers. So the disk encryption is an issue for the systems holding our CI and imaging platforms.

[ Parent | on HN ]