3 Comments
User's avatar
Raul Junco's avatar

Good one.

This explains a mistake I see a lot: teams picking a protection mechanism before they define the actual problem.

Hashing, encryption, and tokenization are not substitutes. They each protect something different.

The part about encryption not reducing data spread was also a strong point because that’s where many teams get it wrong.

Anes's avatar

Nicely written and compiled, thanks very much!

Nikhil Garg's avatar

Too many people conflate these concepts, in a nutshell hashing for integrity, encryption for confidentiality, and tokenisation for reducing exposure surface.