{"action":"created","issue":{"url":"https://api.github.com/repos/gratipay/gratipay.com/issues/3504","repository_url":"https://api.github.com/repos/gratipay/gratipay.com","labels_url":"https://api.github.com/repos/gratipay/gratipay.com/issues/3504/labels{/name}","comments_url":"https://api.github.com/repos/gratipay/gratipay.com/issues/3504/comments","events_url":"https://api.github.com/repos/gratipay/gratipay.com/issues/3504/events","html_url":"https://github.com/gratipay/gratipay.com/issues/3504","id":83144002,"number":3504,"title":"build a vault","user":{"login":"whit537","id":134455,"avatar_url":"https://avatars.githubusercontent.com/u/134455?v=3","gravatar_id":"","url":"https://api.github.com/users/whit537","html_url":"https://github.com/whit537","followers_url":"https://api.github.com/users/whit537/followers","following_url":"https://api.github.com/users/whit537/following{/other_user}","gists_url":"https://api.github.com/users/whit537/gists{/gist_id}","starred_url":"https://api.github.com/users/whit537/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whit537/subscriptions","organizations_url":"https://api.github.com/users/whit537/orgs","repos_url":"https://api.github.com/users/whit537/repos","events_url":"https://api.github.com/users/whit537/events{/privacy}","received_events_url":"https://api.github.com/users/whit537/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/gratipay/gratipay.com/labels/TeamX","name":"TeamX","color":"339966"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/gratipay/gratipay.com/milestones/14","html_url":"https://github.com/gratipay/gratipay.com/milestones/Bring%20Back%20Payroll","labels_url":"https://api.github.com/repos/gratipay/gratipay.com/milestones/14/labels","id":1152632,"number":14,"title":"Bring Back Payroll","description":"","creator":{"login":"whit537","id":134455,"avatar_url":"https://avatars.githubusercontent.com/u/134455?v=3","gravatar_id":"","url":"https://api.github.com/users/whit537","html_url":"https://github.com/whit537","followers_url":"https://api.github.com/users/whit537/followers","following_url":"https://api.github.com/users/whit537/following{/other_user}","gists_url":"https://api.github.com/users/whit537/gists{/gist_id}","starred_url":"https://api.github.com/users/whit537/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whit537/subscriptions","organizations_url":"https://api.github.com/users/whit537/orgs","repos_url":"https://api.github.com/users/whit537/repos","events_url":"https://api.github.com/users/whit537/events{/privacy}","received_events_url":"https://api.github.com/users/whit537/received_events","type":"User","site_admin":false},"open_issues":8,"closed_issues":3,"state":"open","created_at":"2015-06-06T12:30:18Z","updated_at":"2016-04-09T21:13:38Z","due_on":null,"closed_at":null},"comments":63,"created_at":"2015-05-31T17:41:52Z","updated_at":"2016-04-12T14:30:53Z","closed_at":null,"body":"We are going to start storing national identification numbers (https://github.com/gratipay/gratipay.com/issues/3289#issuecomment-107100341) as well as bank account numbers (#3377 downstream of #3366). We need a vault separate from our main application and database that is more highly secure. We should use the PCI DSS 3.0 standard to self-assess the security of our application (https://github.com/gratipay/inside.gratipay.com/issues/214). This ticket is about building a new vault component of our architecture.\r\n\r\n<bountysource-plugin>\r\n---\r\nWant to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/19189281-build-a-vault?utm_campaign=plugin&utm_content=tracker%2F85909&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F85909&utm_medium=issues&utm_source=github).\r\n</bountysource-plugin>"},"comment":{"url":"https://api.github.com/repos/gratipay/gratipay.com/issues/comments/208935053","html_url":"https://github.com/gratipay/gratipay.com/issues/3504#issuecomment-208935053","issue_url":"https://api.github.com/repos/gratipay/gratipay.com/issues/3504","id":208935053,"user":{"login":"whit537","id":134455,"avatar_url":"https://avatars.githubusercontent.com/u/134455?v=3","gravatar_id":"","url":"https://api.github.com/users/whit537","html_url":"https://github.com/whit537","followers_url":"https://api.github.com/users/whit537/followers","following_url":"https://api.github.com/users/whit537/following{/other_user}","gists_url":"https://api.github.com/users/whit537/gists{/gist_id}","starred_url":"https://api.github.com/users/whit537/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whit537/subscriptions","organizations_url":"https://api.github.com/users/whit537/orgs","repos_url":"https://api.github.com/users/whit537/repos","events_url":"https://api.github.com/users/whit537/events{/privacy}","received_events_url":"https://api.github.com/users/whit537/received_events","type":"User","site_admin":false},"created_at":"2016-04-12T14:30:53Z","updated_at":"2016-04-12T14:30:53Z","body":"> [BeyondCorp: Design to Deployment](https://static.googleusercontent.com/media/research.google.com/en//pubs/archive/44860.pdf): Google's BeyondCorp strategy has been heralded as the right way forward for protecting networks. The concept is to no longer have an internal corp network that employees need to hard-wire or VPN into, because that promotes a crunchy outside and soft inside network, where once an attack gets on one of your employee laptops they end up with free rein. The BeyondCorp strategy that Google announced a year ago advises that you shouldn't provide access to systems just because of what network they come in on. This new paper describes this concept in more detail.\r\n\r\nhttps://summitroute.com/blog/2016/04/10/downclimb/"}}