top | item 44641365

(no title)

tidwall | 7 months ago

Like an ACL file?

discuss

order

sureglymop|7 months ago

No, like a path to a file containing the secret/passphrase that the program can then read it from. I am not a fan of putting secrets directly into environment variables.

Environment variables are prone to leak or be passed to child processes when it is not desired. But if they are just a file path/pointer to where the secret is, that is mitigated somewhat as one then would still need access to that file.