4 ms·
Is it reasonable to use it for production environment? I've got set up a few servers on Google Container Engine and trying to figure out what's the best way to
by methyl 9y ago
Is it reasonable to use it for production environment? I've got set up a few servers on Google Container Engine and trying to figure out what's the best way to manage ENV variables and this tool seems like a good fit.
- danenania 9y agoYes, it's been through a several-month beta period and is now production ready. It's running a high availability, multi-az Kubernetes architecture, and encrypted config is also backed up to S3 in a separate region for additional redundancy. Definitely give it a try :) Feel free to reach out to me directly with any questions, feedback, concerns, etc.: dane@envkey.com
- methyl 9y agoThanks! Is there any reason you don't have web app?
- lprubin 9y agoI was part of the Beta when it actually was a web app. The reason I was told for switching to a native app was that it's much easier to secure a native app vs a web app. I think browser extensions are one of the big reasons for that.
- danenania 9y agoIt actually started out as a web app, but the web as a platform is unfortunately not at the point that it can be relied on for zero-knowledge encryption. In short, the goal is to not have to trust the server, but if the server is delivering you javascript and html, there's no way to avoid trusting it. Browser extensions are another problem--there's no way to block a browser extension that has been given page-level permissions from reading the DOM, so managing secrets in your browser means implicitly giving access to a lot of different third parties if you use extensions.