Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> The problem is you need some repository to store this information

This doesn't have to be a Git repository, nor does it have to be the same repository as the code which uses the secrets.

> it's incredibly helpful to store the configuration along with the code

It's helpful, but ultimately means that the ciphertext is potentially available to the world and existing keys may decipher it in perpetuity. Thus this is not a recommended tradeoff to make.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: