29Ağu
Prevent the tampering of the logs of a service
In a security-sensitive service with REST APIs, what is the best way to produce tamper-resistant audit logs?
Signing each log entry is a possibility, but that does no prevent a malicious operator from hiding some of the logs.