Hosted RethinkDB now available on Compose

We should promote it better, but we run new DBs in isolated private networks (databases shouldn't be exposed to the public internet). This makes it a bit more difficult for customers to connect, since they need to figure out how to use SSH tunnels, and hope the DB they're running behaves well in that kind of setup. We've chosen to sacrifice the user experience for security in this case.

More generally, we changed a lot of how we store sensitive data (and broadened what we class as sensitive). Database passwords, customer keys, certificates, etc are encrypted in our DB. Encryption is managed by a "software HSM" developed by Matasano, which gives us a lot of power over who/what can decrypt bits.

Customers are getting more sophisticated as well. It's relatively new to have a database hosted/managed by an entirely different company than the rest of an application. We've been working on content to help people make the right decisions about how they handle these things, here's an example: https://blog.compose.io/encrypting-sensitive-data-in-your-mo...