Firebase数据库加密和安全性

本文介绍了Firebase数据库加密和安全性的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！ 问题描述

我对Firebase和安全性还很陌生，所以我对Firebase的安全性不是100％...

I'm very new to Firebase and security, so I'm not 100% about how secure Firebase is...

例如，我有一个存储用户信息的数据库.我可以认为这是安全的吗?很安全吗?

For instance, I have a database that stores user information. Can I assume this is secure..? Very secure?

我注意到 Firebase文档的摘录:

默认情况下，Google云存储使用与我们用于自己的加密数据相同的强化密钥管理系统，代表您管理服务器端加密密钥，包括严格的密钥访问控制和审核. Cloud Storage使用AES-256加密静止的用户数据，并且每个加密密钥本身都使用一组定期轮换的主密钥进行加密.无需设置或配置，无需修改访问服务的方式，也不会产生明显的性能影响.授权用户读取数据后，将自动透明地解密数据.

By default, Google Cloud Storage manages server-side encryption keys on your behalf using the same hardened key management systems that we use for our own encrypted data, including strict key access controls and auditing. Cloud Storage encrypts user data at rest using AES-256, and each encryption key is itself encrypted with a regularly rotated set of master keys. There is no setup or configuration required, no need to modify the way you access the service, and no visible performance impact. Data is automatically and transparently decrypted when read by an authorized user.

我不确定Google Cloud Storage是否与实时Firebase数据库是否遵循相同的准则.

I'm not sure if the Google Cloud Storage is on the same guidelines as the real time firebase database..

有人会对此有见识吗?我该如何告诉我的用户安全是什么?

Would anyone have insight into this? How secure can I tell my users this is?

任何反馈都会很棒！谢谢.

Any feedback would be great! Thanks.

推荐答案

Firebase实时数据库数据在传输过程中被加密，并且它是存储在服务器上的加密磁盘上.

Firebase realtime database data is encrypted in transit, and it is stored on encrypted disks on the servers.