35
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 25 Feb 2024
35 points (100.0% liked)
Free and Open Source Software
17622 readers
536 users here now
If it's free and open source and it's also software, it can be discussed here. Subcommunity of Technology.
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
founded 2 years ago
MODERATORS
I think you'll have to learn a bit about security. There is no one article, but entire books written about that... And it really depends on the type of service, the used frameworks and the intended deployment.
I'd have a look at similar software. There are tons of open source projects that handle sensitive information. From files like Nextcloud to contact sync to ticketing and payment information.
Edit: I'd leave Docker as an afterthought, since some people recommend that. It's deployment, not development. And not a means of stopping user data getting leaked or stopping login brute forcing.)
A good place to start is the owasp cheat sheet. They provide up-to-date, high value information about software security, I wish there was a resource like this when I started learning about security.
Even though, I have a decent background in software security, it's hard to decide on an encryption schema that's both safe and easy to use. My goal is to increase the number of components an attacker has to compromise in order to get access to the data.