Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Supported by

Is the JATOS database encrypted?

Hello,

I have been running an instance of JATOS on DigitalOcean for a while now and I have HTTPS enabled.

However, a research partner has requested details of the encryption used to secure my data online. So I was wondering: Is the embedded database used by JATOS encrypted or secured in any way by default?

If not, is there a way to do so?


Thanks for your help!

Comments

  • Hi!

    The embedded H2 database is not encrypted in JATOS. Although according to their docs it is possible. But, arguably, it is more important to secure the server where JATOS (with the H2 database) is running on and especially the connection to the server. Most importantly always use encrypted connections, e.g. SSH and HTTPS. I would argue, that if the doors to the server are secure, the data itself on the server can be unencrypted (a security expert would probably tear me apart for writing this). I guess, it depends on how 'secure' you want you data.

    An alternative to the embedded H2 database is always to use an external MySQL or MariaDB. Those database are meant to work in secure environments and support encryption in different ways (that I never tried myself :) ).

    Best,

    Kristian

  • Thanks Kristian,

    I appreciate the reply! I think the question might be a bit of a red herring.

    As you say, I have HTTPS enabled and the firewall is on etc.

    Am I right in thinking that even if the database were exposed, the database itself could not be accessed without some sort of user/password details?

    All the best,

    Chris

  • No, if you have terminal access to the server you can read everything in the H2 database. Use a MySQL or MariaDB for encrypted content.

    Best,

    K.

  • Just to avoid people getting unnecessarily worried.

    No, if you have terminal access to the server you can read everything in the H2 database. Use a MySQL or MariaDB for encrypted content.

    This is true, but the key point is that people do not have terminal access to the server. So the security wall is such that people cannot access the server at all, and thus also not the database on the server, nor for example sensitive documents on the server.

    Your data is very safe on JATOS, provided that it is installed on a properly configured server such as MindProbe.eu.

    Buy Me A Coffee

  • I agree with Sebastiaan. For most usecases it is safe to "just" secure the server and not encrypt the database's data. Actually I've never encountered an encrypted database so far (although I'm not an admin).

    Best

    K.

Sign In or Register to comment.

agen judi bola , sportbook, casino, togel, number game, singapore, tangkas, basket, slot, poker, dominoqq, agen bola. Semua permainan bisa dimainkan hanya dengan 1 ID. minimal deposit 50.000 ,- bonus cashback hingga 10% , diskon togel hingga 66% bisa bermain di android dan IOS kapanpun dan dimana pun. poker , bandarq , aduq, domino qq , dominobet. Semua permainan bisa dimainkan hanya dengan 1 ID. minimal deposit 10.000 ,- bonus turnover 0.5% dan bonus referral 20%. Bonus - bonus yang dihadirkan bisa terbilang cukup tinggi dan memuaskan, anda hanya perlu memasang pada situs yang memberikan bursa pasaran terbaik yaitu http://45.77.173.118/ Bola168. Situs penyedia segala jenis permainan poker online kini semakin banyak ditemukan di Internet, salah satunya TahunQQ merupakan situs Agen Judi Domino66 Dan BandarQ Terpercaya yang mampu memberikan banyak provit bagi bettornya. Permainan Yang Di Sediakan Dewi365 Juga sangat banyak Dan menarik dan Peluang untuk memenangkan Taruhan Judi online ini juga sangat mudah . Mainkan Segera Taruhan Sportbook anda bersama Agen Judi Bola Bersama Dewi365 Kemenangan Anda Berapa pun akan Terbayarkan. Tersedia 9 macam permainan seru yang bisa kamu mainkan hanya di dalam 1 ID saja. Permainan seru yang tersedia seperti Poker, Domino QQ Dan juga BandarQ Online. Semuanya tersedia lengkap hanya di ABGQQ. Situs ABGQQ sangat mudah dimenangkan, kamu juga akan mendapatkan mega bonus dan setiap pemain berhak mendapatkan cashback mingguan. ABGQQ juga telah diakui sebagai Bandar Domino Online yang menjamin sistem FAIR PLAY disetiap permainan yang bisa dimainkan dengan deposit minimal hanya Rp.25.000. DEWI365 adalah Bandar Judi Bola Terpercaya & resmi dan terpercaya di indonesia. Situs judi bola ini menyediakan fasilitas bagi anda untuk dapat bermain memainkan permainan judi bola. Didalam situs ini memiliki berbagai permainan taruhan bola terlengkap seperti Sbobet, yang membuat DEWI365 menjadi situs judi bola terbaik dan terpercaya di Indonesia. Tentunya sebagai situs yang bertugas sebagai Bandar Poker Online pastinya akan berusaha untuk menjaga semua informasi dan keamanan yang terdapat di POKERQQ13. Kotakqq adalah situs Judi Poker Online Terpercayayang menyediakan 9 jenis permainan sakong online, dominoqq, domino99, bandarq, bandar ceme, aduq, poker online, bandar poker, balak66, perang baccarat, dan capsa susun. Dengan minimal deposit withdraw 15.000 Anda sudah bisa memainkan semua permaina pkv games di situs kami. Jackpot besar,Win rate tinggi, Fair play, PKV Games