Rails - Heroku - Postgres - without keeping confidential content in clear text

Question

What is the correct way to handle sensitive content in the rails3 / heroku / postgres database.

Why encryption. How to implement? what to use for implementation?

thanks

Answer 1

this SO article discusses some encryption / decryption options that you might want to learn. Without knowing too much about your application, I would say look there first and see if you can find everything that matches the account. As a big side, pay attention to whatever protection method you choose, be sure to add filters to your application.rb file, otherwise you may find your unencrypted data appearing in the log files. for this you just need to add something like a .rb application:

config.filter_parameters += [:password, :YOUR_FILTERED_PARAM]