4 ms·
It could be nice if there was some clear general convention on a string format for secrets, e.g. `secret_<string>`, such that e.g. system copy paste facilities,
by pveierland 3y ago
It could be nice if there was some clear general convention on a string format for secrets, e.g. `secret_<string>`, such that e.g. system copy paste facilities, email clients, chat clients etc. could provide an extra "Do you intend to share this secret?" step, ideally before even pasting it into a program, and especially before sending, to help prevent you from inadvertently exposing it.
- richbell 3y agohttps://datatracker.ietf.org/doc/html/rfc8959 https://datatracker.ietf.org/doc/html/rfc8959 Although I don't think the actual proposed syntax is good.
- pveierland 3y agoThanks, didn't know about that RFC! Will keep it in mind for such an occasion.
- InCityDreams 3y ago>"Do you intend to share this secret?" Please let Clippy just die...
- luhn 3y agoI've thought about even taking this further: Adding a domain to secret. e.g. secret:example.com:abc Then example.com could host a /.well-known/secrets.json which would include information on how to automatically report and/or revoke a leaked secret.