News for hackers. Stuff that matters.

A comment on Show HN: EnvKey – securely manage API keys, credentials, and config. Parent comment

Re:Show HN: EnvKey – securely manage API keys, credentials, ... by tptacek on Tuesday September 26, 2017 @10:27AM (#15338912)
Let me ask a question that is closer to the spirit of what I meant before:

Given that there are already carefully tested FOSS secret sharing systems, why should some other enterprising soul not just host one of them and compete, rather than building a new proprietary scheme?

[ Parent | on HN ]
Re:Show HN: EnvKey – securely manage API keys, credentials, ... by danenania on Wednesday September 27, 2017 @12:16AM (#15344880)
This is a good question, and believe me, it's an approach I strongly considered.

In the end, I couldn't find a system that would work well as a base for the functionality I wanted to build. If I could have, I would have been all over it, but it would have required compromises to the simplicity and convenience of the service that I didn't want to make. No secret store that I know of is designed in a way that would make it scalable as a saas service like EnvKey without heavy retrofitting.

[ Parent | on HN ]