πSecurity Architecture
Last updated
Last updated
At Kronos Bot, we prioritize the security of your data and transactions. We've implemented robust security measures to ensure that your assets and personal information are protected. Here's an overview of our security practices:
Receiving Authorization Data
When you interact with Kronos Bot and provide authorization, we ensure that your data is handled securely. After successful authorization, we return data in a secure manner to protect your information:
Data Delivery: We provide authorization data either by redirecting you to a specific URL (specified in the data-auth-url attribute) or by calling a callback function (data-onauth).
Private Key-Based Encryption: Utilizing HashiCorp Vault, we ensure secure private key management with individual encryption, housed in isolated, web-inaccessible environments.
Data Parameters: The data we return include id, first_name, last_name, username, photo_url, auth_date, and hash. These parameters are carefully handled to maintain data integrity.
Auth_Date Validation
To enhance security and prevent the use of outdated data, we check the auth_date field. This field contains a Unix timestamp indicating when the authentication was received. By validating this timestamp, we ensure that the data we handle is current and not subject to manipulation.
We are committed to safeguarding your data, ensuring its integrity, and providing you with a secure trading environment. You can trade with confidence, knowing that our rigorous security measures protect your assets and personal information at all times.