Hacker News new | ask | show | jobs
by marshallbrekka 3066 days ago
In addition to the points already raised by ryan_j_naughton, another consideration is how to perform key rotation and cipher upgrades over time. This is a lot more complex if every application is doing it on their own, but is quite easy if you centralize all (or most) crypto to a single service.

See my reply to another comment: https://news.ycombinator.com/item?id=16236798