{"id":2568,"date":"2014-09-23T11:00:46","date_gmt":"2014-09-23T15:00:46","guid":{"rendered":"http:\/\/sqlity.net\/en\/?p=2568"},"modified":"2014-11-26T17:45:19","modified_gmt":"2014-11-26T22:45:19","slug":"flawed-key-management","status":"publish","type":"post","link":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/","title":{"rendered":"Common Database Vulnerabilities: Flawed Key Management"},"content":{"rendered":"
\n

\nIn Common Database Vulnerabilities: Backup Data Exposure<\/a> I told you the story about a lost backup file that lead to data exposure. I used that story to remind you that you need to protect your backups at least as well as your live data. The lost backup however was not the root cause of the problem. The root cause was flawed key management.\n<\/p>\n

\n\"Flawed<\/a>\n<\/div>\n

\nThat client called me after one of their employees had lost their laptop. Now, I am neither in law enforcement nor do I work for an insurance company. So why did they call me about this?\n<\/p>\n

\nThe forgetful employee was a developer and stored on the laptop in question was a backup of the company's database. That backup contained real customer data, which amongst other things included credit card numbers.\n<\/p>\n

Everything was Encrypted<\/h3>\n

\nI had not worked with that client before and they really called me only for their own peace of mind. While the backup file itself was not encrypted, the client was confident that all the important data (the PCI data) was encrypted within the database. All they wanted from me was to confirm that there was no problem.\n<\/p>\n

But\u2026<\/h3>\n

\nI connected to the database and found the credit card information indeed encrypted. However, I also found a couple of views like this one:\n<\/p>\n

\n[sql]\nCREATE VIEW dbo.CustomerCreditCards
\nAS
\nSELECT C.first_name, C.last_name,
\n CAST(DECRYPTBYPASSPHRASE('asw36D2k7XgFcjm',CC.card_number) AS VARCHAR(30)) AS card_number,
\n CAST(DECRYPTBYPASSPHRASE('asw36D2k7XgFcjm',CC.expiration) AS CHAR(4)) AS expiration
\n FROM dbo.Customers AS C
\n JOIN dbo.CreditCards AS CC
\n ON C.customer_id = CC.customer_id;
\n[\/sql]\n<\/div>\n

\nTo protect the customer's interests, I changed the table and column names and the actual passphrase, but this view closely resembles one I actually found in that database.\n<\/p>\n

\nThe customer was not too happy when I told them, that their encryption was entirely useless, as anybody capable of restoring that backup file would be able to run a simple select to get to the credit card numbers in clear text. What followed for them was an unpleasant encounter with the legal side of the PCI compliance rules. This included paying fines and penalties and also quite some reputational damage, as all their customers had to be notified individually of the leak.\n<\/p>\n

Flawed Key Management<\/h3>\n

\nIt is important to encrypt important data like PCI data or PHI<\/a> in your database. But it is also important to manage your encryption keys correctly. The above view, I can only assume, was an attempt to implement something similar to transparent data encryption. While they succeeded to make it transparent to the application, they also succeeded in making it transparent to any attacker. In fact, and attacker would not even need access to a backup file to exploit this problem. Essentially, the data is stored unencrypted.\n<\/p>\n

\nGetting encryption key management implemented correctly is not a trivial task. You need to balance the need to access the data through the application with the requirement not to be able to access the data directly. You might have to change the encryption keys regularly but you should not give your DBAs access to the key. There are many seemingly conflicting requirements and even more ways to get the implementation wrong. Sometimes that leads to the key being accessible to outsiders, negating the entire encryption effort. Sometimes it leads to keys getting lost, leaving you locked out, without access to your important data. To avoid these pitfalls, you need to plan and execute your key management strategy carefully.\n<\/p>\n

\nThe time to act is now. Review your encryption requirements and make sure that all data that should be encrypted is encrypted. But, even more important, make sure that the keys to your encrypted data are not easily accessible to an intruder. Instead, they should be stored in a safe place and backed up. If you are unsure about how to make any of this work, get help from someone with experience in this field.\n<\/p>\n

The Most Common Database Problems<\/h3>\n

\nFlawed Key Management is one of the most commonly encountered database vulnerabilities. In this series of posts, I discuss 10 of them. Below are the ones that are published so far:\n<\/p>\n

\n
\n

Common Database Vulnerabilities: Privilege Abuse<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: SQL Injection<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Unprotected Network<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Inadequate Patch Management<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Backup Data Exposure<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Missing Segregation<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Flawed Key Management<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Weak Audit Trail<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Data Inference<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Defects<\/a><\/h2>\n
<\/div>\n<\/div>\n<\/div>\n\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Encrypting important data is not enough. You also need to handle the encryption keys correctly. Read on to see what flawed key management can result in.<\/p>\n

[more…]<\/a><\/p>\n","protected":false},"author":3,"featured_media":2569,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[222,32,5,197,224,34,27],"tags":[143,273,234,58,15,140],"class_list":["post-2568","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-common-database-vulnerabilities","category-cryptography","category-general","category-hipaa","category-pci-dss","category-security","category-series","tag-asymmetric-key","tag-cryptography","tag-key-management","tag-security-management","tag-sql-server","tag-symmetric-key"],"acf":[],"yoast_head":"\nCommon Database Vulnerabilities: Flawed Key Management - sqlity.net<\/title>\n<meta name=\"description\" content=\"Encrypting important data is not enough. You also need to handle the encryption keys correctly. Read on to see what flawed key management can result in.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Common Database Vulnerabilities: Flawed Key Management - sqlity.net\" \/>\n<meta property=\"og:description\" content=\"Encrypting important data is not enough. You also need to handle the encryption keys correctly. Read on to see what flawed key management can result in.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/\" \/>\n<meta property=\"og:site_name\" content=\"sqlity.net\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/sqlity.net\" \/>\n<meta property=\"article:published_time\" content=\"2014-09-23T15:00:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2014-11-26T22:45:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/09\/Flawed-Key-Management.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"450\" \/>\n\t<meta property=\"og:image:height\" content=\"337\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sebastian Meine\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sqlity\" \/>\n<meta name=\"twitter:site\" content=\"@sqlity\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sebastian Meine\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2568\\\/flawed-key-management\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2568\\\/flawed-key-management\\\/\"},\"author\":{\"name\":\"Sebastian Meine\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#\\\/schema\\\/person\\\/bcffd8c572bc2f1bd10fdba80135e53c\"},\"headline\":\"Common Database Vulnerabilities: Flawed Key Management\",\"datePublished\":\"2014-09-23T15:00:46+00:00\",\"dateModified\":\"2014-11-26T22:45:19+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2568\\\/flawed-key-management\\\/\"},\"wordCount\":742,\"commentCount\":1,\"image\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2568\\\/flawed-key-management\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sqlity.net\\\/wp-content\\\/uploads\\\/2014\\\/09\\\/Flawed-Key-Management.jpg\",\"keywords\":[\"asymmetric key\",\"Cryptography\",\"key management\",\"security management\",\"SQL Server\",\"symmetric key\"],\"articleSection\":[\"Common Database Vulnerabilities\",\"Cryptography\",\"General\",\"HIPAA\",\"PCI DSS\",\"Security\",\"Series\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/sqlity.net\\\/en\\\/2568\\\/flawed-key-management\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2568\\\/flawed-key-management\\\/\",\"url\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2568\\\/flawed-key-management\\\/\",\"name\":\"Common Database Vulnerabilities: Flawed Key Management - sqlity.net\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2568\\\/flawed-key-management\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2568\\\/flawed-key-management\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sqlity.net\\\/wp-content\\\/uploads\\\/2014\\\/09\\\/Flawed-Key-Management.jpg\",\"datePublished\":\"2014-09-23T15:00:46+00:00\",\"dateModified\":\"2014-11-26T22:45:19+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#\\\/schema\\\/person\\\/bcffd8c572bc2f1bd10fdba80135e53c\"},\"description\":\"Encrypting important data is not enough. You also need to handle the encryption keys correctly. Read on to see what flawed key management can result in.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2568\\\/flawed-key-management\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sqlity.net\\\/en\\\/2568\\\/flawed-key-management\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2568\\\/flawed-key-management\\\/#primaryimage\",\"url\":\"https:\\\/\\\/sqlity.net\\\/wp-content\\\/uploads\\\/2014\\\/09\\\/Flawed-Key-Management.jpg\",\"contentUrl\":\"https:\\\/\\\/sqlity.net\\\/wp-content\\\/uploads\\\/2014\\\/09\\\/Flawed-Key-Management.jpg\",\"width\":450,\"height\":337,\"caption\":\"Flawed Key Management\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2568\\\/flawed-key-management\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sqlity.net\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Common Database Vulnerabilities: Flawed Key Management\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/sqlity.net\\\/en\\\/\",\"name\":\"sqlity.net\",\"description\":\"Quality for SQL\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sqlity.net\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#\\\/schema\\\/person\\\/bcffd8c572bc2f1bd10fdba80135e53c\",\"name\":\"Sebastian Meine\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g\",\"caption\":\"Sebastian Meine\"},\"sameAs\":[\"http:\\\/\\\/sqlity.net\",\"https:\\\/\\\/x.com\\\/sqlity\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Common Database Vulnerabilities: Flawed Key Management - sqlity.net","description":"Encrypting important data is not enough. You also need to handle the encryption keys correctly. Read on to see what flawed key management can result in.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/","og_locale":"en_US","og_type":"article","og_title":"Common Database Vulnerabilities: Flawed Key Management - sqlity.net","og_description":"Encrypting important data is not enough. You also need to handle the encryption keys correctly. Read on to see what flawed key management can result in.","og_url":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/","og_site_name":"sqlity.net","article_publisher":"https:\/\/www.facebook.com\/sqlity.net","article_published_time":"2014-09-23T15:00:46+00:00","article_modified_time":"2014-11-26T22:45:19+00:00","og_image":[{"width":450,"height":337,"url":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/09\/Flawed-Key-Management.jpg","type":"image\/jpeg"}],"author":"Sebastian Meine","twitter_card":"summary_large_image","twitter_creator":"@sqlity","twitter_site":"@sqlity","twitter_misc":{"Written by":"Sebastian Meine","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/#article","isPartOf":{"@id":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/"},"author":{"name":"Sebastian Meine","@id":"https:\/\/sqlity.net\/en\/#\/schema\/person\/bcffd8c572bc2f1bd10fdba80135e53c"},"headline":"Common Database Vulnerabilities: Flawed Key Management","datePublished":"2014-09-23T15:00:46+00:00","dateModified":"2014-11-26T22:45:19+00:00","mainEntityOfPage":{"@id":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/"},"wordCount":742,"commentCount":1,"image":{"@id":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/#primaryimage"},"thumbnailUrl":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/09\/Flawed-Key-Management.jpg","keywords":["asymmetric key","Cryptography","key management","security management","SQL Server","symmetric key"],"articleSection":["Common Database Vulnerabilities","Cryptography","General","HIPAA","PCI DSS","Security","Series"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/","url":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/","name":"Common Database Vulnerabilities: Flawed Key Management - sqlity.net","isPartOf":{"@id":"https:\/\/sqlity.net\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/#primaryimage"},"image":{"@id":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/#primaryimage"},"thumbnailUrl":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/09\/Flawed-Key-Management.jpg","datePublished":"2014-09-23T15:00:46+00:00","dateModified":"2014-11-26T22:45:19+00:00","author":{"@id":"https:\/\/sqlity.net\/en\/#\/schema\/person\/bcffd8c572bc2f1bd10fdba80135e53c"},"description":"Encrypting important data is not enough. You also need to handle the encryption keys correctly. Read on to see what flawed key management can result in.","breadcrumb":{"@id":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/#primaryimage","url":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/09\/Flawed-Key-Management.jpg","contentUrl":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/09\/Flawed-Key-Management.jpg","width":450,"height":337,"caption":"Flawed Key Management"},{"@type":"BreadcrumbList","@id":"https:\/\/sqlity.net\/en\/2568\/flawed-key-management\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sqlity.net\/en\/"},{"@type":"ListItem","position":2,"name":"Common Database Vulnerabilities: Flawed Key Management"}]},{"@type":"WebSite","@id":"https:\/\/sqlity.net\/en\/#website","url":"https:\/\/sqlity.net\/en\/","name":"sqlity.net","description":"Quality for SQL","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sqlity.net\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/sqlity.net\/en\/#\/schema\/person\/bcffd8c572bc2f1bd10fdba80135e53c","name":"Sebastian Meine","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g","caption":"Sebastian Meine"},"sameAs":["http:\/\/sqlity.net","https:\/\/x.com\/sqlity"]}]}},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p2wXuw-Fq","jetpack-related-posts":[],"jetpack_featured_media_url":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/09\/Flawed-Key-Management.jpg","_links":{"self":[{"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/posts\/2568","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/comments?post=2568"}],"version-history":[{"count":0,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/posts\/2568\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/media\/2569"}],"wp:attachment":[{"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/media?parent=2568"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/categories?post=2568"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/tags?post=2568"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}