System that splits passwords across two servers

Posted by Burning the Codeigniter on Programmers See other posts from Programmers or by Burning the Codeigniter
Published on 2012-10-10T20:31:14Z Indexed on 2012/10/10 21:52 UTC
Read the original article Hit count: 364

Filed under:
|
|
|

I stumbled upon this news article on BBC,

tl;dr - a (randomized) password is split in half and is stored across two separate servers, to foil hackers that gained access to either server upon a security breach.

Now the main question is, how would this kind of system would be made... codespeaking, for PHP which I commonly develop on my web applications, the database password is normally stored in a configuration file, i.e. config.php with the username and password, in that case it is understandable that the passwords can be stolen if the security was compromised.

However when splitting and sending the other half to the other server, how would this go on when making a communication to the other server (keeping in mind with PHP) since the other server password would be stored in a configuration file, wouldn't it? In terms of security is to keep the other server password away from the main one, just exactly how would the main server communicate, without exposing any other password, apart from the first server.

This certainly makes me think...

© Programmers or respective owner

Related posts about database

Related posts about security