Hacker News new | ask | show | jobs
by SkyPuncher 2271 days ago
It's a bit more nuanced. Hipaa (two a's) does not require the type end-to-end encryption that most devs come to think of.

Generally, Hipaa does require transport encryption from the client to the server processing the request. The importance here is SSL/TLS should be terminated at the app server.

1 comments

HIPAA (all caps)