We use Knox: http://github.com/pinterest/knox Think of a lighter vault, with ACL... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

ecesena on June 2, 2020 | parent | context | favorite | on: Ask HN: How does your company manage its encryptio...

We use Knox: http://github.com/pinterest/knox

Think of a lighter vault, with ACLs for people and/or machines to access keys and versioning to rotate keys.

In our case, Knox depends upon AWS KMS to "lock/unlock" its storage.

lux on June 2, 2020 [–]

This looks way easier than getting Vault setup! Unfortunately, googling for it returns a ton of info about Apache Knox which is an unfortunate name clash. I would love to see this catch on. Thanks for the share!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact