Hacker News new | ask | show | jobs
by Cederfjard 1336 days ago
This is from their website: https://www.postman.com/trust/security/

> Depending upon its sensitivity classification, customer data is AES-256-GCM encrypted at the server-side before storage. Postman environment variables are covered in this classification and we strongly encourage you to use them to store your authentication keys and passwords. We have also added sessions in the 6.2 release onwards of Postman. We recommend using session variables for any data that you do not want to be synced to Postman's servers.
1 comments
aliqot 1336 days ago
> Depending upon its sensitivity classification

What does this mean?

link
natebc 1335 days ago
> Postman environment variables are covered in this classification and we strongly encourage you to use them to store your authentication keys and passwords.

It reads to me that they encrypt Postman environment variables and encourage you to use those.

Not sure what else is "Customer data" in that regard but it seems they consider at least that bit worthy of encryption.

link