Re: Encrypting Cached data

[Georgi Alexandrov <georgi.alexandrov () gmail com>]

Yousef Syed wrote:

> Hi,
> Is it possible to encrypt data stored in the cache of a Web Server or
> Application server?
>
> We'd like to use caching for performance reasons, but don't want
> secure data to be viewable if the server is compromised.
>
> What is the best way to do this?
>
> Thanx,
> ys
>
> --
> Yousef Syed
> "One senior official said the consultancy "doesn't have the greatest
> of reputations among civil servants. They come and state the bleeding
> obvious using Powerpoint"."
>
>  
Actually i don't think you have a problem at all.
99.9% of the secure/sensitive web data these days is transfered via 
https (SSL/TLS). E.g. usernames and passwords, credit card information, etc.
Proxy/cache servers don't cache SSL/TLS data because it's useless. They 
cache only the non-encrypted content.


regards,
Georgi Alexandrov