compliance-engineering
Append-Only Audit Logs in Postgres: Your Trigger Misses TRUNCATE
--- Second post from the compliance-ready backend kit, after nested JWTs. This one is about the audit log, which is the control an…
#compliance
2 posts RSS
PCI DSS 4.0: Client-Side Attack Vectors and What Developers Must Do
Payment form security has largely focused on backend systems, until now. PCI DSS 4.0 draws much-needed attention to client-side ri…