General SWE

Question 1

Encryption in flight (TLS/SSL)

Answer 1

• Data is encrypted before sending and decrypted after receiving
• TLS certificates help with encryption (HTTPS)
• Encryption in flight ensures no MITM (man in the middle attack) can happen

Question 2

Server-side encryption at rest

Answer 2

• Data is encrypted after being received by the server
• Data is decrypted before being sent
• It is sorted in an encrypted form thanks to a key (usually a data key)
• The encryption / decryption keys must be managed somewhere, and the server must have access to it

Question 3

Client-side encryption

Answer 3

• Data is encrypted by the client and never decrypted by the server.
• Data will be decrypted by a receiving client.
• The server should never be able to decrypt the data.
• Cloud leverage envelope encryption.