DEV Community


Discussion on: Where to use encryption 🤔

lucis profile image

What do you understand about "encryption"?

If the API is served over HTTPS your traffic is already much safe. If not, check Let's Encrypt and do it right away. Your API also should have a auth protection if it handles sensitive data, like a JWT approach. Also, check HelmetJS for some security good practices.