Show HN: Encryption as a Service

Show HN: Encryption as a Service rypt.dev

Symmetric encryption over HTTPS: one bearer token, one call per operation, and no key rings or IAM policies to set up.

3 points•levidurfee•5 days ago•2 comments•

#service #encryption #https #operation #symmetric #key #bearer #token

Hello, I’m looking for some criticism. I’m also looking for some people to help test this service.

2 comments

This is really nicely done. One question. Since you state 'this is not zero-knowledge' because plaintext briefly hits your API over HTTPS, what precise architectural isolation protects that plaintext in memory while it is being encrypted?

levidurfee5 days ago

That's an excellent question! It's currently running on Google Cloud Run, which to my knowledge, doesn't offer any encrypted memory options. So, as of now, there isn't any architecture in place to protect the plaintext.

It's definitely something we've thought about. And something we may pursue.

Read the full thread on Hacker News →

2 comments

Related stories