Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Like an ACL file?


No, like a path to a file containing the secret/passphrase that the program can then read it from. I am not a fan of putting secrets directly into environment variables.

Environment variables are prone to leak or be passed to child processes when it is not desired. But if they are just a file path/pointer to where the secret is, that is mitigated somewhat as one then would still need access to that file.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: