Show HN: Infisical – open-source secrets manager

Re:Show HN: Infisical – open-source secrets manager by encryptluks2 on Monday December 19, 2022 @06:31PM (#34059389)

I'm just as critical as anyone else in this space, but several popular Docker images do this and it is on the software not the management solution to enact best practices. However, as noted this software is sort of designed to accommodate those bad practices and I can give you a list of open source alternatives in this space with more security options so I don't think they are going to be able to compete well with other alternatives if they are still in the alpha phase unless they already have something that differentiates their solution that is appealing. So far I've found nothing.

[ Parent | on HN ]

Re:Show HN: Infisical – open-source secrets manager by vmatsiiako on Monday December 19, 2022 @06:35PM (#34059433)

Thank you for the feedback! Would you be able to provide a list? Then, I can easily tell you what differentiates us from them in a meaningful way. So far, we haven't found any alternatives that would have the same vision as Infisical :)

[ Parent | on HN ]

Re:Show HN: Infisical – open-source secrets manager by encryptluks2 on Monday December 19, 2022 @07:40PM (#34059980)

There is vaultwarden, gopass, Vault, SOPS, Conjur, dotenv, etc.

[ Parent | on HN ]

Re:Show HN: Infisical – open-source secrets manager by vmatsiiako on Tuesday December 20, 2022 @08:05AM (#34065293)

Well, without pointing fingers:

- some of these don't have a Web UI at all - which I think is very important

- some of these don't have integrations with 3rd party services

- some of these are only compatible with JS

- some of these are just so complicated so you need at least a week to figure them out :)

[ Parent | on HN ]

Re:Show HN: Infisical – open-source secrets manager by encryptluks2 on Tuesday December 20, 2022 @09:57PM (#34076138)

> Well, without pointing fingers: - some of these don't have a Web UI at all - which I think is very important

Why?

> some of these don't have integrations with 3rd party services

Like?

> some of these are only compatible with JS

What do you mean only compatible with JS?

> some of these are just so complicated so you need at least a week to figure them out :)

You could say the same about anything. So you want users to just trust yours but have to figure everyone elses out? If they had to understand yours from a more fundamental perspective I'd imagine yours would take just as long.

[ Parent | on HN ]