3 ms·
The tl;dr version: Programmer: store this key securely Library: stores key on the heap Library maintainer: working as designed.
by Rygian 4y ago
The tl;dr version:
Programmer: store this key securely
Library: stores key on the heap
Library maintainer: working as designed.
- 6yyyyyy 4y agohttps://git.sr.ht/~sircmpwn/hare/tree/master/item/crypto/keystore/README https://git.sr.ht/~sircmpwn/hare/tree/master/item/crypto/key...
- andrewchambers 4y agoThis is not really accurate, it stores keys as securely as it is able to. Also the heap is not inherently insecure - it depends on other factors such as network isolation, user permissions, containers and other kernel protections. Many things like https and ssh servers store secrets on the heap when they are in use.