Single comment thread
See full discussion

SSL + Devise (Rails) or just encrypt every message my users send, so even if a hacker got access to my DB he will just obtain a bunch of hashes with nonsense.

For e-mails, I just recollect all the emails send it directly to my MailChimp/Mailgun marketing list so when this arrives at my DB all of them are already encrypted. So no data to disclose.

I know that I could be making my app safe if I invest time in developing some security measures, but in the end, unless you are delivering for a big company or a hot startup, you should be shipping a better product instead of doing backend work.

Home
Search
Messages
Notifications
More