Don't recommend putting private keys into a version-controlled file

[danfinlay]

This doc page currently shows sample code that involves pasting a private key into a file that I find regularly version controlled around github.

This sounds like a recipe for private keys being leaked by developers.

Rather than this MVP example, I would recommend having an example that shows at least basic private key sanitation, like how #1748 shows that using a .env file is common.

[kanej]

Thanks for the feedback. We are looking to implement ways to improve our key management and provide a long term solution.

In the meantime, we will take an action to review that doc page. Thanks again.

[github-actions[bot]]

This issue was marked as stale because it didn't have any activity in the last 30 days. If you think it's still relevant, please leave a comment indicating so. Otherwise, it will be closed in 7 days.

[lilpolymath]

@fvictorio I would like to work on this.