|
|
|
This section tries to outline Bashhub's practices to address Security and Privacy.
|
|
|
|
|
|
|
|
##Communication
|
|
|
|
###HTTPS
|
|
|
|
![SSL Certificate](https://pbs.twimg.com/media/BxY9gqFIIAAXPpE.png:large)
|
|
|
|
|
|
|
|
All data communication is done using HTTPS.
|
|
|
|
|
|
|
|
##Storage
|
|
|
|
|
|
|
|
###Storage Level Encryption
|
|
|
|
All commands are stored in a non-relational database that is encrypted at rest using [storage level encryption via LUKS](https://gist.github.com/jamiekurtz/8f8d1f95da58bf741ee5).
|
|
|
|
|
|
|
|
###Text Search
|
|
|
|
To support text search on the server side, commands are not encrypted at the application layer. Searching would require decrypting commands on demand. A full search experience requires there to be a text index on the commands themselves. |