News for hackers. Stuff that matters.

A comment on Crypto Tools for DevOps: Git-Crypt – Tozny. Parent comment

Re:Crypto Tools for DevOps: Git-Crypt – Tozny by emmelaich on Monday April 10, 2017 @04:57PM (#14082486)
Well, not in your main repo.

But secrets like other config benefit from versioning and so the perfect place to keep them is in a version control system no?

You can sharply limit who has access; and perhaps only allow access via some web api.

For small teams or lone developers I think git-crypt is great.

[ Parent | on HN ]
Re:Crypto Tools for DevOps: Git-Crypt – Tozny by tptacek on Monday April 10, 2017 @05:12PM (#14082602)
I would contend that they do not benefit from versioning and, as I pointed out above, can sometimes suffer as a result of it.
[ Parent | on HN ]
Re:Crypto Tools for DevOps: Git-Crypt – Tozny by cortesoft on Monday April 10, 2017 @05:43PM (#14082821)
Which part of versioning is the problem? Is it the history keeping?
[ Parent | on HN ]