2 ms·
So when EnvKey fails or is under attack, you lost access (or give away MITM) to all your infra ?
by sametmax 9y ago
So when EnvKey fails or is under attack, you lost access (or give away MITM) to all your infra ?
- ipfaffy 9y agoThis is the key to me. This tech would make life easier, but what happens when there is an outage or they get hacked or $reason?
- topraman 9y agothis
- danenania 9y agoThis is of course a legitimate concern, but it's also one that is addressed in EnvKey's design. Client-side encryption means that even if we are attacked, no sensitive data will be exposed. And we have a failover to S3 so that you won't lose access if the service goes down. Storing config and secrets obviously requires trust, but at the same time, many other services that developers use without a second thought actually require a lot more trust than EnvKey does.