2 ms·
As another point of reference an HTTP load balancer that mailgun built and uses, called vulcan[1], uses secretbox[2] to encrypt secrets into etcd. There are no
by philips 12y ago
As another point of reference an HTTP load balancer that mailgun built and uses, called vulcan[1], uses secretbox[2] to encrypt secrets into etcd. There are no good docs on how to use this in practice with vulcanctl so I will need need to ask them to document that :)
[1] https://github.com/mailgun/vulcand https://github.com/mailgun/vulcand
[2] http://godoc.org/code.google.com/p/go.crypto/nacl/secretbox http://godoc.org/code.google.com/p/go.crypto/nacl/secretbox
- bketelsen 12y agoHi Brandon! - secretbox is another great way to encrypt data, and would have worked for this project too. Ultimately we chose openpgp because it allows us to encrypt the same data with multiple public keys all at once, for multiple consumers.