…can always use self-signed certs. If you want to go deeper down the rabbit hole check out SRP: http://srp.stanford.edu/ In terms of dealing more securely with data on your server, check out the book, Translucent Databases ( http://www.amazon.com/Translucent-Databases-Peter-Wayner/dp/... )
很多技术在应用层就能搞定。一个很好的例子就是大家在数据库里基本都会用的哈希密码。Wayner 写的这本《Translucent Databases》是一部经典的数据库著作，每个开发者的书架上都该有一本。我和 Peter Wayner 没有任何利益关系，只是单独发了个帖子想帮他的作品做做宣传：http://news.ycombinator.com/item?id=3373947……
Many of the techniques can be done at application level. A great example of this that most of us already use in the database is the hashed password. Wayner's translucent databases book is one of those classic DB works that should be on every dev's bookshelf. I'm not affiliated with Peter Wayner at all but I've added a separate story to get the word out about his work: http://news.ycombinator.com/item?id=3373947…
I think it was on here that someone recommended this - http://www.wayner.org/node/46 > Translucent databases provide better, deeper protection by scrambling the data with encryption algorithms. The solutions use the minimal amount of encryption to ensure that the database is still functional. In the best applications,…
很多年前我买并读了 Peter Wayner 写的《Translucent Databases》。我非常喜欢这本书，现在想重温一下——出了第二版，但那是 2010 年出的（亚马逊上卖 75 刀）。这书现在还过时吗？有没有同主题的新书……
Many years ago I bought and read "Translucent Databases" by Peter Wayner. I liked it very much and I would like a refresher - there is a 2nd edition but it came out in 2010 (and costs 75$ on Amazon). Is this still relevant? Are there newer books on the same…
Valid concern. Translucent Databases covers this. http://wayner.org/node/46 http://a.co/97iqrM5 TL;DR: Various clever ways to encrypt records, organized for fast & easy retrieval, uncoverable if the key is lost (or deleted). Also: We…
The database or file system is likely (hopefully) encrypted. I'm referring to record and field level encryption. Like this: Translucent Databases http://a.co/d/5855TYO http://wayner.org/node/46 Think of how password databases don't actually store passwords. Instead they (should) be storing salted and hashed passwords. --- Please see my other…
……完全可以用自签名证书。如果你想继续深挖，可以看看 SRP：http://srp.stanford.edu/。关于如何更安全地处理服务器上的数据，推荐看看《Translucent Databases》（半透明数据库）这本书（http://www.amazon.com/Translucent-Databases-Peter-Wayner/dp/...）
…can always use self-signed certs. If you want to go deeper down the rabbit hole check out SRP: http://srp.stanford.edu/ In terms of dealing more securely with data on your server, check out the book, Translucent Databases ( http://www.amazon.com/Translucent-Databases-Peter-Wayner/dp/... )
很多技术在应用层就能搞定。一个很好的例子就是大家在数据库里基本都会用的哈希密码。Wayner 写的这本《Translucent Databases》是一部经典的数据库著作，每个开发者的书架上都该有一本。我和 Peter Wayner 没有任何利益关系，只是单独发了个帖子想帮他的作品做做宣传：http://news.ycombinator.com/item?id=3373947……
Many of the techniques can be done at application level. A great example of this that most of us already use in the database is the hashed password. Wayner's translucent databases book is one of those classic DB works that should be on every dev's bookshelf. I'm not affiliated with Peter Wayner at all but I've added a separate story to get the word out about his work: http://news.ycombinator.com/item?id=3373947…
我记得好像就是在这里有人推荐过这个——http://www.wayner.org/node/46 > 半透明数据库通过加密算法打乱数据，提供更好、更深层次的保护。这些方案使用最低限度的加密，以确保数据库仍然可用。在最佳实践中，……
I think it was on here that someone recommended this - http://www.wayner.org/node/46 > Translucent databases provide better, deeper protection by scrambling the data with encryption algorithms. The solutions use the minimal amount of encryption to ensure that the database is still functional. In the best applications,…
很多年前我买并读了 Peter Wayner 写的《Translucent Databases》。我非常喜欢这本书，现在想重温一下——出了第二版，但那是 2010 年出的（亚马逊上卖 75 刀）。这书现在还过时吗？有没有同主题的新书……
Many years ago I bought and read "Translucent Databases" by Peter Wayner. I liked it very much and I would like a refresher - there is a 2nd edition but it came out in 2010 (and costs 75$ on Amazon). Is this still relevant? Are there newer books on the same…
担心得很合理。《Translucent Databases》专门讲了这个。http://wayner.org/node/46 http://a.co/97iqrM5 太长不看版（TL;DR）：各种巧妙的记录加密方式，组织得当以便快速检索，但如果密钥丢失（或被删），数据就彻底无法还原。另外：我们……
Valid concern. Translucent Databases covers this. http://wayner.org/node/46 http://a.co/97iqrM5 TL;DR: Various clever ways to encrypt records, organized for fast & easy retrieval, uncoverable if the key is lost (or deleted). Also: We…
数据库或文件系统很可能（希望如此）已经加密了。但我指的是记录级和字段级的加密。就像这样：《Translucent Databases》http://a.co/d/5855TYO http://wayner.org/node/46 想象一下密码数据库其实并不存明文密码，相反，它们（应该）存的是加盐并哈希过的密码。--- 请看看我的另一条……
The database or file system is likely (hopefully) encrypted. I'm referring to record and field level encryption. Like this: Translucent Databases http://a.co/d/5855TYO http://wayner.org/node/46 Think of how password databases don't actually store passwords. Instead they (should) be storing salted and hashed passwords. --- Please see my other…