Hacker News new | ask | show | jobs
by bootloop 2561 days ago
Well, the trick is that using a KeyStore ensures that the key doesn't leak into the application (but is only used for cryptographic operations in a trusted environment).

However, you would need the plain key to authenticate against the database so using this wouldn't work.

1 comments

Gotcha, I see the problem now.