From e4a6fada6513f5ad64a4ac5825d284505cdf9f3b Mon Sep 17 00:00:00 2001 From: doctator Date: Fri, 2 May 2025 20:51:30 +0000 Subject: [PATCH] Add Encryption Standards --- Encryption-Standards.md | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 Encryption-Standards.md diff --git a/Encryption-Standards.md b/Encryption-Standards.md new file mode 100644 index 0000000..e647cee --- /dev/null +++ b/Encryption-Standards.md @@ -0,0 +1,23 @@ + + +Encryption is applied to all data in transit and at rest across Genesis Hosting Technologies infrastructure. + +## In Transit + +- HTTPS via TLS 1.3 (minimum TLS 1.2 for legacy fallback) +- SFTP for all file transfers +- SSH for all administrative access +- rclone with TLS for object storage replication + +## At Rest + +- ZFS encryption on backup pools +- PostgreSQL encryption at the database or filesystem level +- WHMCS and DirectAdmin credentials hashed and salted +- Backups encrypted with AES-256 before remote transfer + +## Key Management + +- SSH keys rotated every 6 months +- Let's Encrypt certs auto-renew every 90 days +- Master encryption keys stored offline and version-controlled