在Meteorjs中加密Mongo数据 [英] Encrypt Mongo data in Meteorjs

问题描述

当插入文档时，是否可以加密特定的集合的某些Mongodb字段？然后在发布集合时解密？

解决方案

我不知道这是否为您的用例过度使用： p>

Mylar 是一个流星模块，支持客户端加密。

Mylar只存储服务器上的加密数据，只能在用户浏览器中解密数据。 [...] Mylar允许服务器通过加密文档执行关键字搜索，即使文档是用不同的密钥加密的。 [...]最后，Mylar确保客户端应用程序代码是真实的，即使服务器是恶意的。结果与建立在流星框架之上的Mylar的原型很有希望

您没有要求框架，而是自制安全经常做错了。

Is it possible to encrypt certain Mongodb field for particular collection when the document is being inserted? And then decrypt it while publishing the collection?

解决方案

I'm not sure if this is overkill for your use case:

Mylar is a Meteor module which supports client-side encryption.

Mylar stores only encrypted data on the server, and decrypts data only in users' browsers. [...] Mylar allows the server to perform keyword search over encrypted documents, even if the documents are encrypted with different keys. [...] Finally, Mylar ensures that client-side application code is authentic, even if the server is malicious. Results with a prototype of Mylar built on top of the Meteor framework are promising

You didn't ask for a framework, but homebred security is often done wrong.

这篇关于在Meteorjs中加密Mongo数据的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！