DEV Community

loading...

Discussion on: Where to use encryption 🤔

Collapse
lucis profile image
Lucis

What do you understand about "encryption"?

If the API is served over HTTPS your traffic is already much safe. If not, check Let's Encrypt and do it right away. Your API also should have a auth protection if it handles sensitive data, like a JWT approach. Also, check HelmetJS for some security good practices.