Public Server and Backend Security
In the digital world we live in, securing your communication systems is paramount. At Bigfoot Voice, we prioritize the protection of your data by implementing robust security measures. One such measure is our Public Server and Backend Security setup, designed to safeguard your interaction with our hosted IP PBX services.
What is Public Server and Backend Security?
The Public Server and Backend Security refers to the protective barriers we have put in place to ensure the integrity, confidentiality, and availability of your data. This system serves static frontend files while the Node/Express API runs behind Nginx on localhost.
Why it Matters
This setup ensures that sensitive information, such as Deepgram, AWS, FreeSWITCH ESL, and database secrets, remain secure within the .env on the server. By employing hashed bearer tokens for backend sessions and limiting one active session per tenant domain and extension, we minimize potential security vulnerabilities.
How it Works
When you interact with our services, your data travels through the public deployment and reaches our servers. The static frontend files are served directly, while the API calls are processed through Nginx on localhost. The use of hashed bearer tokens helps verify your identity and secure your session.
What to Expect
With this setup, you can expect a secure and reliable interaction with our services. API calls are logged when database logging is enabled, providing an additional layer of security and audit trail.
Common Questions and Issues
- Q: How is my data protected within the .env on the server?
- A: Access to the .env file is restricted, and the sensitive information within it is encrypted.
- Q: What happens if multiple active sessions are attempted for a tenant domain or extension?
- A: The system will automatically terminate any additional active sessions, ensuring only one session remains active at any given time.
How Bigfoot Voice Handles This
At Bigfoot Voice, we continuously monitor and update our security measures to ensure your data remains secure. We are committed to providing you with the highest level of protection for your communication needs.
For more detailed information about our security measures, we recommend consulting our comprehensive security documentation. If you have any questions or concerns, please don't hesitate to contact our support team.