ENCRYPTION AT REST: WHOSE THREAT MODEL IS IT ANYWAY?

Summary from the TLDR InfoSec newsletter

This post discusses the importance of encryption at rest for web and cloud applications to protect sensitive data. It highlights the need for a clear threat model and proper key management when implementing encryption at rest. It also emphasizes the risks of confused deputy attacks and the importance of understanding the nuances of encryption strategies.