23 ms·
In addition to the points already raised by ryan_j_naughton, another consideration is how to perform key rotation and cipher upgrades over time. This is a lot
by marshallbrekka 9y ago
In addition to the points already raised by
ryan_j_naughton, another consideration is how to perform key rotation and cipher upgrades over time. This is a lot more complex if every application is doing it on their own, but is quite easy if you centralize all (or most) crypto to a single service.
See my reply to another comment: https://news.ycombinator.com/item?id=16236798 https://news.ycombinator.com/item?id=16236798