encrypting data in db

[ArmenD]

hi,
so if i am using a hosting company's db, do i need to encrypt data in db or is it generally assumed to be safe.

i just don't know if hosting companies are required by law to take top measures of securing their databases.
any1 have experience with this.

 

[alvechurchdata]

if i am using a hosting company's db, do i need to encrypt data in db or is it generally assumed to be safe

That's a matter for discussion between yourself and your client. What would be the implications for them if the data is lost, stolen, or corrupted? Do they want to pay extra for encryption?

Geoff Franklin

http://www.alvechurchdata.co.uk

 

[mrdenny]

If you read the user agreement between your self/your client and the hosting company you will probably see that they will keep the server up, and will do there best to keep the server secure, but any loss of data is your problem.

If you are hosting personal information such as SSN, Credit Card numbers, passwords, etc I'd encrypt that info as best as possible. I'd be looking at a one way MD5 hash for the password, and a 128 or 256 bit reversable encryption for the credit card numbers and SSN.

Denny

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

(My very old site)