Hi,
I have a special security requirments for my web application that is going to be deployed on a cloud host service( either AWS or Azure). We have to encrypt some of the data in the database. The requirement is to not store the encryption keys within my application.We need to have them on another server that is accesable with a static IP.
Any idea what are the solutions for this dilemma ? I'm thinking in writing a web services that can be used to encrypt the data (just send the clear text and get the encrypted one). We can use SSL for these web service, but I still need to have user/pass for these web services to restrict access to them. So the user/pass for these web services still need to be saved on the client app (which will be in this case my web application) . so this will not be a asecured way since the user/pass can be used from anyone who have access to my application.
I need a more secured way... any ideas please
...
Go to the complete details ...