Data Security

Encryption

The communication between the user interface and the server, as well as the communication with the GraphQL API, is encrypted via HTTPS. Only TLS 1.3 with Perfect Forward Secrecy (PFS) is used for encrypted communication. Isarsoft Perception can be configured to use provided certificates. By default, it will create a self-signed certificate on startup.

User

Passwords are stored in hashed form. The bcrypt hashing function, derived from the Blowfish cipher and incorporating salting, is employed.

User passwords have 32 characters by default and must have at least one uppercase letter, at least one lowercase letter, at least one number and at least one of the following special characters:

! \ "§ $% & / () {}?.,:; -_ # + * <> @ ^ = +.