News for hackers. Stuff that matters.

A comment on We updated our RSA SSH host key. Parent comment

Re:We updated our RSA SSH host key by adql on Friday March 24, 2023 @03:40PM (#35294390)
You shouldn't commit unencrypted secrets to git anyway, public or private, on-site or in cloud.

There are plenty of tools to either keep them encrypted (we just use simple GPG, but our team is small) or just auto-generate and never show to user in the first place (various key vaults that can be used from automation like HashiCorp's Vault)

[ Parent | on HN ]
Re:We updated our RSA SSH host key by nwallin on Friday March 24, 2023 @04:30PM (#35294998)
The person I'm replying to is arguing that their source code itself is the secrets they're trying to protect.
[ Parent | on HN ]