Viewing profile — marshallbrekka

For an API call that requires decrypting data it can add about 5-10ms, most of that comes from reading the values from the token database. Encrypting will incur a similar performan…

https://news.ycombinator.com/item?id=16236798 https://news.ycombinator.com/item?id=16237349

The mono-repo of protos has been our approach, and has worked very well for us so far. Only difference is we publish the resulting code for all languages into a single artifact rep…

In short, our REST based APIs are done via a YAML syntax, but our newer APIs are through Protocol Buffers. See my other comment for more details https://news.ycombinator.com/item?i…

It's so specific to our architecture that there would be little value in open sourcing it. That being said, there are some lessons we learned along the way that I do think are wort…

You're correct that it does make certain kinds of analysis more difficult. However that doesn't mean we can't ever get access to the original data. Most of our current BI needs to …

It's a custom Go application that proxies rest/json based APIs, as well as gRPC/Protobuf.

In addition to the points already raised by ryan_j_naughton, another consideration is how to perform key rotation and cipher upgrades over time. This is a lot more complex if every…

The service is written in-house, but we do use Vault for things like provisioning temporary credentials.

I can elaborate on these points. The service acts more like a key value store (this is a simplified explanation, but for your questions it will do). You give it a value, it gives y…