Daily Edition · Page 4

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ARTICLES & TUTORIALS

TLDR Web Dev

UPGRADING 3 MILLION VARIABLES TO ENVELOPE ENCRYPTION

Railway, a cloud deployment platform, used to rely heavily on Google Cloud's Key Management Service (KMS) for encrypting sensitive user configuration variables. To improve performance, security, and reduce dependency on a single provider, Railway implemented envelope encryption, which encrypts data with a data encryption key that is itself encrypted with a key encryption key. This change reduced KMS usage and allows Railway to have potentially no dependencies on external cloud infrastructure in the future.

DISTRIBUTED AUTHORIZATION

Authorization is complex and creates problems in microservice-based applications. Existing approaches either mix authorization logic with application code (making it hard to understand and update) or centralize authorization data, leading to tough data synchronization. A new service called Oso Cloud solves these issues with policy-based logic and a new distributed authorization architecture, allowing developers to define logic centrally while still using local data to make authorization decisions.

TLDR IndexPage 4