JWT vs session authentication: which should you use?
Sessions end a login instantly; JWTs skip the database lookup. How each works, why revocation decides it for device limits and forced logout, and a hybrid for web and apps.
Ideas & updates
The Upclass Blog
Security, piracy and engineering deep dives, plus practical ideas for growing your institute. From the team building Upclass.
More articles Page 10 of 11
Signed URLs and hotlink protection for video, explained
How signed links and hotlink protection get bypassed: links shared before expiry, valid sessions, leaked secrets, public storage and faked Referer headers.
RTO and RPO: planning disaster recovery that works
Set recovery time and recovery point objectives per system, choose between backup and restore, pilot light, warm standby and active/active, apply 3-2-1 backups and run drills.
Encryption vs tokenization: what's the difference?
Encryption transforms data; tokenization replaces it. How they compare with masking and hashing, how RBI card tokenisation works, and what to use for student and fee data.
How do Netflix downloads work? Secure offline video
Netflix downloads are encrypted, app-only, device-bound and time-limited. How they work, why offline copies are a target, and what to ask before offering downloads.
Zero-downtime deployment: blue-green, canary and rolling
Deploy during a live class without anyone noticing: rolling, blue-green and canary compared, draining connections and WebSockets, feature flags and exam-day deploy freezes.
Encryption key management: a practical guide
Keys, not ciphers, are where encryption usually fails. The key lifecycle, KMS, HSMs and vaults compared, keeping keys out of code, and what to ask a vendor.
Root, jailbreak and emulator detection: how apps do it
Why rooted phones, jailbreaks and emulators matter to video apps, how detection gets bypassed, why attestation isn't enough, and what to ask your app vendor.
Zero-downtime database migrations: expand and contract
Change a live Postgres schema without locking students out: expand and contract, lock timeouts, concurrent indexes, NOT VALID constraints, batched backfills, safe Django migrations.
Envelope encryption and KMS, explained
Data keys encrypt the data; a master key in a KMS wraps the data keys. How cloud KMS services work, why rotation is cheap, and the cost, quota and caching trade-offs.
DRM vs encryption: what's the difference?
All DRM uses encryption, but the two fail differently: captured keys, software-only devices, recording and shared logins. What each stops, and what to ask vendors.
Sharding vs partitioning: how databases split data
Partition inside one server before you shard across many: Postgres declarative partitioning by date, shard keys for multi-institute platforms, the costs of sharding and when it pays.
Upclass for institutes
Launch your academy. Keep every course safe.
Your courses, live classes and tests in your own branded app, with piracy protection on every lecture. Plans start at ₹1,999/month.