3 ms·
I'm happy they've provided a solution to Encrypted Secrets instead of simply saying "You should not commit secrets".
by poorman 10y ago
I'm happy they've provided a solution to Encrypted Secrets instead of simply saying "You should not commit secrets".
- artursapek 10y agoThere's a new command, `bin/rails secrets:setup`. I haven't worked with any recent versions of rails, but it's kind of surprising that they are just now addressing this. I know I've seen Rails secrets being checked into Github.
- stouset 10y agoEven with this, I think it's personally a bad idea. But sometimes security is improved more by reducing the impact of making poor decisions (e.g, storing secrets in your repo more safely) than it is by chastising users to make better decisions (not storing them in your repo at all).