From the course: Advanced MongoDB: Efficient and Secure Data Management

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Client-Side Field Level Encryption

Client-Side Field Level Encryption - MongoDB Tutorial

From the course: Advanced MongoDB: Efficient and Secure Data Management

Start my 1-month free trial Buy for my team

Client-Side Field Level Encryption

“

- Client-side field-level encryption protects sensitive data before it leaves the client. Imagine you have this type of data which contains credit card information. Naturally, you want to be extra careful with that and encrypt that. When you hear people speaking about data encryption in a database, people often mean encryption at rest. That is data is encrypted when it is stored on the hard drive. Encryption at rest notably does not mean that your data is encrypted while it is in use, and thereby, in memory, or while it is passing through the network on its way to and from the users or between different replica set members. For encryption in transit, MongoDB supports TLS and X.509 authentication. Using that, your data will be protected while in transit, but the only way to encrypt data while it's in use in the database is to encrypt it in the application before it is sent to the database. Client-side field-level…

Contents