TOPIC SECURITY
Encryption Rest vs Transit two places data leaks
IN 10 SECONDS
Encryption in Transit secures data as it travels across the network (TLS, HTTPS). Encryption at Rest secures data stored physically on disks (KMS keys, BitLocker).
GOTCHA Encrypting disks at rest won't protect you if application APIs are unencrypted in transit (HTTP), allowing attackers to sniff data off the wire.
HOW DATA IS PROTECTED
01 Transit route client sends credit card info. HTTPS encrypts traffic over internet cables.
02 Decrypt server web server decrypts payload, sending it internally.
03 Rest write database server encrypts record using KMS key before saving to block storage.
POKE IT YOURSELF
openssl enc -aes-256-cbc -salt -in data.txt -out data.enc — manually encrypt data before writing to storage
Drill this topic →
~65 sec read