Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #14410

B

blog.koan.co

Company blog · blog.koan.coprogrammingstartups

blog.koan.co is the company blog at blog.koan.co, writing about programming and startups. Since 2017, 5 different Hacker News readers have linked it 8 times, most often “Securing Customer Data with KMS and Envelope Encryption in Node.js”. No feed was found, so read it on the site itself.

No feed foundVisit the blog
8mentions?
5HN people?
2017–2019first – last linked?
Links on Hacker News per year · peak 3 in 2018

Too few sampled comments (3) to say how often HN recommends it.?

Why HN links it

HN readers link the blog for a post on securing customer data with AWS KMS and envelope encryption, mentioned as a reference when someone asks how to encrypt sensitive database fields.

Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

Most-linked posts?

  1. Securing Customer Data with KMS and Envelope Encryption in Node.js
    3 people · 4 mentions · first linked 2017-10-24

What Hacker News says?

  1. I need key management for a system I'm building. I need to encrypt documents per-role, and also sensitive fields in the DB per-role. I'm planning on using Amazon KMS for both these tasks (the document encryption is straightforward with KMS + S3, and for the row level security I'll probably implement something similar to [0]) Does anyone have any insight how Vault would compare for these tasks? Or if I'm going down t…

    Comment linking /securing-customer-data-with-kms-and-envelope-encryption-in-node-js-b61983ddaa98

    on “HashiCorp Vault 0.9”
  2. Submitted Securing Customer Data with KMS and Envelope Encryption in Node.js as a story · 47 points

    HN discussion
  3. I'm implementing something similar right now, using parse-server. parse-server is the application layer in front of a mongo database, through which all read/write operations transit. parse-server uses "triggers" like "beforeSave" and "afterFind" that can modify the object(s) or request(s) made by or returned to the client. I am using beforeSave to encrypt objects, and afterFind to decrypt them, using envelope encryp…

    Comment linking /securing-customer-data-with-kms-and-envelope-encryption-in-node-js-b61983ddaa98

    on “Ask HN: The way to encrypt and protect sensitive data in database”
  4. Submitted Easier React Component Testing Through Dependency Injection HOCs as a story · 7 points

    HN discussion
  5. It's unclear to me if you are trying to encrypt the days in transit, in memory or at rest? I don't know anything about your environment but if I were in AWS I would be using KMS; this blog post walks through it: https://blog.koan.co/securing-customer-data-with-kms-and-env...

    Comment linking /securing-customer-data-with-kms-and-envelope-encryption-in-node-js-b61983ddaa98

    on “Ask HN: The way to encrypt and protect sensitive data in database”
  6. Submitted Introducing Koan – Goal Planning and Tracking for Teams as a story · 6 points

    HN discussion
  7. Submitted On-Demand Pricing Slashed Our DynamoDB Bill by 90% as a story · 5 points

    HN discussion
  8. Submitted Announcing the Koan Goal Metrics API as a story · 4 points

    HN discussion

Search all of HN for blog.koan.co