• ActivityPub Server in a Single PHP File: Love this tiny activitypub implementation in php. I’m working on something similar and it’s a reminder to me that the kernel of an ap server is straightforward indeed …
  • The Cloud Fugitive DHH: DHH discusses his rationale for leaving aws largely for server hosting. (Sounds like they still use s3.)
  • Cloud Egress Costs: Getting your data back out of aws, and gcp, and others is expensive!
  • Moore’s Scofflaws: Bryan Cantrill writes about owning your own datacenter hardware, and the software that runs on top of it, and how much it costs to rent this stuff from someone else.
  • How I write HTTP services in Go after 13 years: I remember the first post Mat wrote on this topic years ago. Nice follow up. I like thinking about the reasoning behind the way we organize code. For stuff like debuggability in production, and testability!
  • Bluesky: An Open Social Web: How the bluesky social network is currently thinking about federation with a philosophical compare to mastodon.

Google cloud kms documentation

  • Envelope encryption: When storing sensitive data create a single use data encryption key (dek), encrypt data, encrypt dek with a server encryption key (sek), then store encrypted data, dek close together. Sek is stored in a key management service. (kms) There are many more deks than seks. Use 1 or a small number of seks per functional area or group.

Encrypt data

Decrypt data