3 ms·
Encrypted with what key? Do you just mean obscured?
by akvadrako 2y ago
Encrypted with what key? Do you just mean obscured?
- projektfu 2y agoThe utility has a means of encrypting them with public key cryptography so that the plaintext is never in your development directory. GP thinks this should be made mandatory.
- airtonix 2y agopoint is: where and how you do get this key when in prod?
- progx 2y agoThe "securest" way is, you start your app and the app awaits the input of the key, it is only in the RAM. But in reality, nobody will do that.
- michaelmior 2y agoPart of my point is that if you care about security, you need to be thinking about these things. Forcing encryption then also forces you to think about how to provide the key. Of course, it's possible to do this in a very insecure way that defeats the purpose of encryption in the first place, but I think it moves things in the right direction.
- cced 2y agoThere are a lot of ways of doing this, sealed secrets is one, mozilla sops is another.
- michaelmior 2y agoNo, I mean encrypted. I'm not sure what you mean by "obscured", but if you just mean obfuscated in some easily recoverable way without a key, then no. If you read the original post, it describes the mechanism that dotenvx already has in place for encryption.