argd678
Joined 7 years ago
Karma
361
Submissions
156
Member since
Feb 2
Joined 7 years ago
Update: corrected to CCU from MAU
I should also mention the trend towards these Vault services to store secrets is even worse, as that they effectively make all secrets on a machine world readable since an off box service can’t determine what user is making the request. And the trust on first use idea is lacking in most implementations and vendors like HashCorp in fact don’t want to add it anymore since apparently their users had problems using it and would lock their apps out by accident. So... yeah.