Re:Crypto Tools for DevOps: Git-Crypt – Tozny
by IncRnd on Monday April 10, 2017 @04:44PM
(#14082376)
Those are different implementations of the same thing, the manner of passing secrets. While that sounds like a truism, saying it has value - because the issue isn't passing of secrets but how to protect the secrets before you pass them. In other words, how to leverage external key material that unlocks your secrets.
This change takes the application from security through obscurity to something that uses protected secrets.
This change takes the application from security through obscurity to something that uses protected secrets.