On: Show HN: Crypt – Secure Configuration Storage in Etcd or Consul

[dantiberian]

The article says you encrypt, then compress. You might want to clarify that.

[doomrobo → dantiberian]

How can you possibly compress encrypted data? An ideal cipher should produce output indistinguishable from randomness, which is inherently difficult (read: near impossible) to compress.

[kelseyhightower → doomrobo]

Hopefully we corrected the docs and the comments here help, but we don't encrypt before we compress. We compress before we encrypt.

[bketelsen → dantiberian]

My bad - fixed.

[michaelmior → bketelsen]

In the next paragraph after the one you fixed

> crypt encrypts, compresses, then encodes your value for storage

[bketelsen → michaelmior]

dammit.

[saturdayplace → bketelsen]

In this thread: just talking or writing _about_ encryption can be difficult. To say nothing of correctly implementing it in a project.