In short
Protecting sensitive data both in transit (via HTTPS/TLS) and at rest (encrypting sensitive database fields) so a breach doesn't expose readable sensitive data.
How to learn this
- 1Confirm all your API traffic is served over HTTPS, never plain HTTP.
- 2Encrypt a genuinely sensitive field, e.g. a national ID number, before storing it.
- 3Learn the difference between encryption (reversible) and hashing (one-way) — use the right one for the right data.
More topics at this stop
Stuck on this topic? Ask an Insider
Get 1:1 guidance from people who've walked this exact path — on the InsideEdge app.
