Next steps
I have to be honest with you. We only touched briefly on the subject of security. There are hundreds, if not thousands, of books on this topic. But the information I gave you should help you get in the right mindset. Remember that a system is only as secure as the weakest link. And security is something that you should consider from the beginning, not added as an afterthought.
One final warning – do not try to reinvent the wheel and come up with your own algorithms. Your solutions are never as good as what teams of hundreds of crypto and security experts can come up with. Trust them to do their job so that you can focus on yours.
That being said, we did cover a lot of ground. We discussed the following:
- The need for security in modern applications
- How data is represented in memory and how to protect against that
- How to handle keys in Azure Key Vault but also in simple things such as environment variables
- How to deal with the proper privilege...
