Show HN: Crypt – Secure Configuration Storage in Etcd or Consul
xordataexchange.github.io
Show HN: Crypt – Secure Configuration Storage in Etcd or Consul
1–10 of 25 posts
Re: Show HN: Crypt – Secure Configuration Storage in Etcd or Consul
#2Another great and needed product written in Go. Nice work!!
Re: Show HN: Crypt – Secure Configuration Storage in Etcd or Consul
#3This is interesting, I'm happy that the tool be available as a library.
Re: Show HN: Crypt – Secure Configuration Storage in Etcd or Consul
#4Another great and needed product written in Go. Nice work!!
It's particularly useful in clustering environments like CoreOS and Kubernetes where it's a little harder to pass configs securely. Instead, just bind a local volume to your docker container with your private keys, and load your configs securely from etcd/consul.
Re: Show HN: Crypt – Secure Configuration Storage in Etcd or Consul
#5"After encryption it is gzipped" is a red flag. After encryption it should be noise, why try to compress it?
Re: Show HN: Crypt – Secure Configuration Storage in Etcd or Consul
#6I had always wondered how these service discovery tools handled the encryption of data you put in them. I guess now I know! :)
Before this was created were people just doing an encrypt/decrypt on in/out in their application code?
Re: Show HN: Crypt – Secure Configuration Storage in Etcd or Consul
#7As another point of reference an HTTP load balancer that mailgun built and uses, called vulcan[1], uses secretbox[2] to encrypt secrets into etcd. There are no good docs on how to use this in practice with vulcanctl so I will need need to ask them to document that :)
[1] https://github.com/mailgun/vulcand
[2] http://godoc.org/code.google.com/p/go.crypto/nacl/secretbox
Re: Show HN: Crypt – Secure Configuration Storage in Etcd or Consul
#8"After encryption it is gzipped" is a red flag. After encryption it should be noise, why try to compress it?
Sorry, if I said that in the video. What we do is base64(gpg(gzip(data)))
We gzip the data first, then encrypt it, finally base64 encode it.
Re: Show HN: Crypt – Secure Configuration Storage in Etcd or Consul
#9I had always wondered how these service discovery tools handled the encryption of data you put in them. I guess now I know! :) Before this was created were people just doing an encrypt/decrypt on in/out in their application code?
or, perhaps they weren't encrypting.
Re: Show HN: Crypt – Secure Configuration Storage in Etcd or Consul
#10I had always wondered how these service discovery tools handled the encryption of data you put in them. I guess now I know! :) Before this was created were people just doing an encrypt/decrypt on in/out in their application code?
or, perhaps they weren't encrypting.
That was my thought but I was trying to be nice :p