News for hackers. Stuff that matters.

A comment on Bye Bye Mongo, Hello Postgres. Parent comment

Re:Bye Bye Mongo, Hello Postgres by hbbio on Thursday December 20, 2018 @01:12AM (#18722848)
Exactly. As I read the original article, which mentions "encryption-at-rest", there was a voice in my head crying: "No, what they need is E2EE". That would enable the authors to write confidential drafts of the articles, no matter where the data is stored (and AWS would be perfectly fine of course).

Disclaimer: The voice is my head does not come out of nowhere. I am building a product which addresses this: https://github.com/wallix/datapeps-sdk-js is a API/SDK solution for E2EE. Sample app integration is available at: https://github.com/wallix/notes (you can switch between master and datapeps branches to see the changes of the E2EE integration)

[ Parent | on HN ]
Re:Bye Bye Mongo, Hello Postgres by manigandham on Thursday December 20, 2018 @02:26AM (#18723088)
In which case they could've just used a separate encryption layer with any database, including DynamoDB. The HSM security keys available from all the clouds makes this rather simple.
[ Parent | on HN ]
Re:Bye Bye Mongo, Hello Postgres by hbbio on Thursday December 20, 2018 @02:54AM (#18723197)
Yes, any db including Dynamo would have been fine.

Our software E2EE solution has advantages over HSM though: Cost obviously, and more features and extensibility.

[ Parent | on HN ]
Re:Bye Bye Mongo, Hello Postgres by AlexCoventry on Thursday December 20, 2018 @01:22AM (#18722887)
Great idea.
[ Parent | on HN ]