3 ms·
Typing isn't everything. Humans won't have to type "secret-token:" but they will have to read it and it looks ugly :-) I would probably have voted for "secret
by jlokier 6y ago
Typing isn't everything. Humans won't have to type "secret-token:" but they will have to read it and it looks ugly :-)
I would probably have voted for "secret:[..]".
But maybe ugly is good.
Secret tokens shouldn't survive for long in source code or files you read, or .bash_history files, or your editor's buffers. They should be in secret config files that you don't read often or even open in an editor.
Maybe it's better that they are annoying to see, as a reminder to move them somewhere you don't look at.
- EamonnMR 6y agoThe uglyness is a feature. I wish it where all caps. You should see that line in a PR and the hair on the back of your neck should stand up and you're off to rotate that secret.