3 ms·
In real life it's pretty hard to accidentally say your private keys or 16-character alphanumeric password to people. On the other hand, maybe it's best they ca
by strken 4y ago
In real life it's pretty hard to accidentally say your private keys or 16-character alphanumeric password to people.
On the other hand, maybe it's best they can't be deleted, since that will force people to rotate them.
- cmeacham98 4y agoIf you accidentally post a key/password in public/semi-public place you should immediately rotate it, regardless of whether or not you can delete it.
- strken 4y agoYeah, but there's also defence in depth, right? Being unable to delete a message means you're exposed to anyone who can see your main Slack channel for the stretch of time between posting and rotating, as opposed to the smaller number of people who saw the message or who are running a weird patched Slack client.
- trasz 4y agoThis isn’t defence in depth, this is security by obscurity. Also, honestly, if you are manually typing passwords and copy/pasting private keys, you can’t expect any security anyway.