This blog post describes how to keep sensitive data secure on slave servers in a MySQL async replication setup.
Almost every web application has a sensitive data: passwords,
SNN, credit cards, emails, etc. Splitting the database to
secure and “public” parts allows for restricting user and
application parts access to sensitive data.
Field encryption
This is based on MySQL encryption functions or on client-side encryption when the authorized user knows a secret, but encrypted data is distributed to all slaves.
- If possible, use hashes with a big enough salt, and do not store real sensitive …