4 ms·
> If you rely on your configuration to be secret to be secure it's just security by obscurity and not worth much anyway. What I had in mind is that the average
by personjerry 8y ago
> If you rely on your configuration to be secret to be secure it's just security by obscurity and not worth much anyway.
What I had in mind is that the average person wouldn't be a target, but publicly declaring their security vulnerability would attract attacks they wouldn't receive otherwise.
- intertextuality 8y agoOnly key harvester bots on GitHub/etc would notice. If you’re being consciously attacked by someone then you have bigger problems to deal with. The solution isn’t particularly hard either, simply source a secrets file and make sure you add that to the gitignore file.