3 ms·
Hare language LWN thread: “how do I know if my keys will be stored securely?”
- metadat 4y agoWhat a mess of a thread. LWN charges for the privilege of engaging in these discussions, right? This instance on LWN seems more toxic than the HN average. Unencouraging gatekeeper nonsense. What's the upside for SirCmp?
- Rygian 4y agoThe tl;dr version: Programmer: store this key securely Library: stores key on the heap Library maintainer: working as designed.
- 6yyyyyy 4y agohttps://git.sr.ht/~sircmpwn/hare/tree/master/item/crypto/keystore/README https://git.sr.ht/~sircmpwn/hare/tree/master/item/crypto/key...
- andrewchambers 4y agoThis is not really accurate, it stores keys as securely as it is able to. Also the heap is not inherently insecure - it depends on other factors such as network isolation, user permissions, containers and other kernel protections. Many things like https and ssh servers store secrets on the heap when they are in use.