4 ms·
Do any APIs standardise on a simple secret key pattern that can be easily identified as a secret? For example, all secrets have a "secret-" prefix? Or is this i
by seanwilson 6y ago
Do any APIs standardise on a simple secret key pattern that can be easily identified as a secret? For example, all secrets have a "secret-" prefix? Or is this idea unworkable?
I usually try and prefix e.g. fields in config files with "secret" to make it obvious they shouldn't be committed.
- csnover 6y agoThere was a discussion a while ago about IETF RFC 8959 which proposes a secret-token URI that might be of interest: https://news.ycombinator.com/item?id=25978185 https://news.ycombinator.com/item?id=25978185