3 ms·
The stated purpose is to allow detection of strings that should not be publicly disclosed. If such string would also plainly identify what it is good for it wou
by dfox 6y ago
The stated purpose is to allow detection of strings that should not be publicly disclosed. If such string would also plainly identify what it is good for it would essentially defeat the purpose. Ie. the authors want to encourage creation of automated tools that prevent disclosure of such tokens, not encourage creation of automated tools that will harvest such tokens from publicly accessible data.
- danielheath 6y agoYes, but there's also value in services automatically revoking leaked credentials, which is made easier by including such an identifier.
- remram 6y agoThe purpose is to detect secret strings in source code. If you have the source code, the purpose of the secret is easy to figure out.