How we use IPs
airTRFX is a web based application and all web based applications generate log files. These log files contain the IP addresses of those users accessing the airTRFX web application. EveryMundo needs the log files and the information inside them for the following reasons:
- Troubleshooting of the web application and Quality Assurance
- Attack mitigation
- Continuous security improvements for the application
- System performance improvements
- System tracking
The airTRFX web application does not collect any user IP addresses, it is only collecting the IP address from the airline’s CDN. The airTRFX web application is responding to the CDN requests and not to the user requests directly.
Keeping Log Files Secure
EveryMundo log files are stored in AWS S3 Buckets (Cloud Based Storage Service by Amazon). These files are Encrypted in 256-bit Advanced Encryption Standard (AES-256). Each object within the airTRFX log files is encrypted with a unique key employing a strong multi factor encryption.
As an additional safeguard, the unique key is itself encrypted with a master key that is regularly rotated. Encryption works by taking plain text and converting it into cipher text, which is made up of seemingly random characters. Only those who have the special key can decrypt it. AES uses symmetric key encryption, which involves the use of only one secret key to cipher and decipher information. AES-256, which has a key length of 256 bits, supports the largest bit size and is practically unbreakable by brute force based on current computing power, making it the strongest encryption standard.