News for hackers. Stuff that matters.

A comment on Show HN: Keeper – embedded secret store for Go (help me break it).

Re:Show HN: Keeper – embedded secret store for Go (help me b... by n0n on Friday April 10, 2026 @07:15AM (#47716354)
Genuine question: what's your thread model?

Vault gives time limited Tokens with Network Boundary. Instead of Keeper, i would just use age:

# write

echo "my secret" | age -r <recipient-pubkey> > secret.age

# read

age -d -i key.txt secret.age

[ Parent | on HN ]
Re:Show HN: Keeper – embedded secret store for Go (help me b... by babawere on Friday April 10, 2026 @08:03AM (#47716802)
not when you need an audit system
[ Parent | on HN ]
Re:Show HN: Keeper – embedded secret store for Go (help me b... by n0n on Friday April 10, 2026 @09:22AM (#47717767)
True, but AFAIK an audit system is worthless if it resides on the same potentially compromised machine, no?
[ Parent | on HN ]
Re:Show HN: Keeper – embedded secret store for Go (help me b... by sneak on Friday April 10, 2026 @08:30AM (#47717116)
https://git.eeqj.de/sneak/secret

This is an age+filesystem secrets manager that I made that is basically what you wrote, but with more organization.

[ Parent | on HN ]