I wish there was something like stackoverflow but not toxic and only for these kind of questions. I've found https://security.stackexchange.com/ to be pretty good around security design questions