3 ms·
The command line can be read by any user on the host (with `ps auxww` for example) while the environment cannot. You should never pass secrets on the command l
by akvadrako 1y ago
The command line can be read by any user on the host (with `ps auxww` for example) while the environment cannot.
You should never pass secrets on the command line.
- bjourne 1y agoEnvironment variables are not more secure than command line parameters! It's such a common misconception that because environment variables are "not seen" they can serve as a secure channel. They emphatically cannot.
- akvadrako 1y agoSecrets being hidden ("not seen") is really their main quality...