This has come to mind a few times. Goal would be to offer a simple API that developers could use to encrypt data before storing and when retrieving. Something like this:
Internally, encrypt() would pull from something like config.encryption_key in the env settings, or, you could optionally pass an encryption key on the fly. This would give full control over encryption to developers while helping to keep data more secure.
This has come to mind a few times. Goal would be to offer a simple API that developers could use to encrypt data before storing and when retrieving. Something like this:
Internally,
encrypt()
would pull from something likeconfig.encryption_key
in the env settings, or, you could optionally pass an encryption key on the fly. This would give full control over encryption to developers while helping to keep data more secure.