nelson icon indicating copy to clipboard operation
nelson copied to clipboard

Implement type-safe secrets protection

Open goedelsoup opened this issue 6 years ago • 1 comments

Most secrets used throughout the codebase are carried along as strings. I think an implementation like that in ciris would go a long way in helping to manage the risk around logging users' secrets. Hashicorp Vault was actually just hit with a similar CVE.

goedelsoup avatar Dec 07 '18 00:12 goedelsoup

Huh, this is super fascinating @goedelsoup - would love to see something like this, as it certainly is an issue. Thanks for submitting this

timperrett avatar Dec 10 '18 18:12 timperrett