ActiveRecord::Encryption; Stop Hackers from Reading your Data

July 14, 2023 39 min Free

Description

In this talk, Matthew Langlois and Kylie Stradley discuss ActiveRecord::Encryption and how to secure your data. They cover why encrypting database columns is important, how ActiveRecord::Encryption works, and the pitfalls and successes encountered while implementing it at GitHub. The presentation also delves into key management strategies, including storing keys in a secure vault and implementing custom key providers. They also discuss the process of upgrading existing records, both previously encrypted and plain text, to use ActiveRecord::Encryption, and touch upon important considerations like feature flags and disabling compression before encryption.