Re:Azure Cosmos DB, a globally distributed database
by voellm on Wednesday May 10, 2017 @09:11PM
(#14313211)
One of the best parts of the perf SLA is we did it with all Data Encrypted at Rest. I'm biased. I lead security for CosmosDB.
[ Parent
| on HN ]
Re:Azure Cosmos DB, a globally distributed database
by sargun on Thursday May 11, 2017 @01:22AM
(#14314005)
Why is encryption at rest difficult? I presume it's all AES (hardware accelerated), with some key derived at system boot time?
Are y'all doing encryption in the D/C, or just on the WAN? If you're doing it on the WAN, any luck using MACSEC?