Hacker News new | ask | show | jobs
by cavisne 3005 days ago
A key difference is in kms you never know the actual secret (kms stores this on your behalf) . This is for use cases where you need the secret in application code, like db creds.

Looks like a cool product I noticed they dont include a revoke workflow though, the trickiest bit of key rotation