Ask HN: Is a file with both public and secret content a secret or not?

Re:Ask HN: Is a file with both public and secret content a s... by smt88 on Thursday September 23, 2021 @08:55AM (#28628430)

The secrets are secret. Store them securely.

If storing the secrets securely doesn't cause the public settings to be inaccessible where/when they're needed, then you have nothing else to do.

Separate the secret and non-secret data. Don't even use files, just let each item be its own individual value with its own key and permissions.

Also, it doesn't sound like anyone debating this is experienced enough to be making security decisions, even very basic ones.

[ Parent | on HN ]

Re:Ask HN: Is a file with both public and secret content a s... by iamAy0 on Thursday September 23, 2021 @09:51AM (#28629128)

we aren't here discussing about whether the used pattern is correct or not, it's clearly not. But that's not the scope of the question.

[ Parent | on HN ]

Re:Ask HN: Is a file with both public and secret content a s... by smt88 on Thursday September 23, 2021 @10:24AM (#28629591)

Then the file is secret. It's a nonsensical argument.

It's like saying, "If I put military secrets and my grocery list in a locked briefcase, is the briefcase a secret?"

First: yes, of course it is. Second: the secrets are not inherently tied together forever. You can separate them.

[ Parent | on HN ]