How do you manage/store/hide encryption keys in UI application for encrypted APIs?

like
Posting as :
works at
You are currently posting as works at

What threat are you protecting against?

If the UI application is an SPA/PWA and if the client is compromised, then encryption keys are the least of your worries.

If you are looking for encrypting the encryption keys, then usage of the OS's password manager (KeyChain, etc.) is an option. That would mean that the device admin would need to unlock the password manager for the application to be usable.

If you are looking for in-memory protection of application data and keys (eg: if the application can run in a shared infrastructure on the cloud), then there are commercial solutions like Fortanix Runtime Protection. However, this is overkill for regular applications.

I am looking for in-flight encryption between angular SPA/PWA and spring boot application.

I understand. If the spring boot application is physically located on a different machine, TLS can be used for securing the communication channel. Is your concern about how to secure the symmetric encryption keys negotiated for TLS? If that is the case, then it is usually not something that developers worry about much. TLS keys do not get stored on disk. It is very hard for an attacker to get the keys from RAM, and it is simply not a threat that developers care about for 99.9% of applications.

Related Posts

I’ve been a club performing rep for years at a SaaS company…but as an enterprise account exec… my average deal size is around $75k in annual recurring, quota of $1M. This is inline for my company but low when I speak with others for Enterprise rep openings. Any thoughts on recommendations for steps to bridge that gap?

like

I was on a partner/manager call today and they were discussing the “high” turnover at the senior and experienced associate level. What was shocking is that while ours is about double normal, evidently we are 3 out of 4 in turnover meaning 2 of the Big 4 are even higher.

like

Johnson & Johnson Hi any job offering in Johnson & Johnson Abbott

Remembered today that dream of " opening a tea stall infornt of office"
Well after wfh the IT chaiwala dream bubble burst.

funnylike

Talking about shoddy practices, welcome Wells Fargo 🐟

like

My pie day pie (belated!) Ina Garten’s chocolate banana cream recipe. My first time ever making a pudding. I have to say it was amazing to go from muttering “oh shit” for a solid 20 minutes of mixing the eggs/milk too aggressively into a foam and finally seeing it condense into pudding. Deffo recommend trying it!

Post Photo
like

Hi Guys,

I have an offer from Naggaro and Samsung SDS ,Can you please suggest which one to join reviews on Glassdoor are very confusing . I am 6.2 YOE guy .

like

In my 40s, here in the larger NYC area for a couple weeks visiting family. Male, athletic. If anyone's interested in chatting (admittedly in a playful mood currently, so that's my current preference), drop me a DM.

likefunny

Cockapoo vs cavapoo? Easier dog to own

How much severance should you expect after getting booted after 1 year. I got 3 months salary

like

Hi fishes,

1)What is the Hike process in BNY Mellon?
2)When we expect Variable pay bonus to be paid and how much % BNY is paying on yearly basis?
3)What is the Financial cycle for BNY Mellon?

like

I'm curious to know how many (and which) tech companies have resumed physical onsite interviews in their offices?

like

In Barcelona right now, any top recs for places to eat / drink / see?

like

Anyone work for Uber? Thoughts on culture, benefits, etc..?

like

Has anyone here used a professional resume service? Would recommend again or not worth it?

like

What is one piece of advice you would give someone considering engineering?

like

What are TL benefits in LM?

Anyone else feeling the whiplash of following supreme court drama and then going to work the next day pretending like half your rights aren't up for debate?

like

Do you have a set $ you save every month? I'm 27, I've been tracking spend since 2020 and my $ saved has very strong variances MoM. If we consider 2021 a more "regular" year, I varied from $600 saved one month up to $3.2k in another (though that was partially due to a job change)... It's not affecting my overall saving % (was 46%) but wondering if I should try to even it out a bit more?

like

Additional Posts in Technical Assistance

Welcome , this group is intended to discuss the technical problems you are facing , we will have people from different technical backgrounds who can discuss and help solve the problem or maybe guide in the approach to solve the problem.
Happy Assisting !!!

like

Does anyone know what is Rest API . How can I use ? Is there any guide or videos available to know about Rest API. Please share if you have any thoughts. Thanks!

Should I check if the entry exists in table before going for the delete , if wouldn't make a difference if the entry isn't present , and otherwise it would be two operations , check if exists and then delete

like

Can anyone help me regarding windows Installer using WIX toolset I need help

My friend is creating a React application for client and He wants to know which is the best way to Integrate payments in react? So from website, user can pay and owner of application will receive payment

Can we update data present in .json file in the assest of our angular app.

My requirement is:-
I am displaying some list if data present in this hson file.
There is a feature of saving some data.
I need to save this data and write it to the json file.

Using - Angular 12 only.
No backend is there.

What is best way to read and parse 100mb excel file using java , any library that can handle 100mb file

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal