News for hackers. Stuff that matters.

ops_mechanic

ops_mechanic on Hacker News

Show HN: Enseal – Stop pasting secrets into Slack .env sharing from the terminal

Posted by ops_mechanic on Monday February 23, 2026 @09:15PM
from the show-hn dept.

https://github.com/FlerAlex/enseal

We've all done it — "hey can you DM me the staging .env?" Secrets end up in Slack history, email threads, shared notes — all searchable, all persistent. The secure path (1Password, GPG, etc.) always had more friction than the insecure one, so people took the shortcut. enseal makes the secure path faster than the insecure one: # sender $ enseal share .env Share code: 7-guitarist-revenge ...

( Read More... | 1 comment | 3 points | on HN )
Re:Show HN: CertRadar – Find every certificate ever issued for your do... on Sunday January 25, 2026 @07:19PM (#46760189)
Thank you for your suggestion one more time. I've implemented Domain registration data via RDAP protocol.
Re:Show HN: CertRadar – Find every certificate ever issued for your do... on Sunday January 25, 2026 @05:54PM (#46759455)
Thank you, @westurner. Excellent suggestions!
Re:Show HN: CertRadar – Find every certificate ever issued for your do... on Sunday January 25, 2026 @05:45PM (#46759356)
Thank you for the kind words, I'm glad you enjoy it.
Re:Show HN: CertRadar – Find every certificate ever issued for your do... on Sunday January 25, 2026 @12:52PM (#46756301)
Hey HN, I built this after years of dealing with SSL certificate surprises – expired certs on subdomains nobody knew existed, shadow IT spinning up certs, the usual 3am outages.

CertRadar has four free tools (no signup, no premium tier):

- CT Log Search – find every certificate ever issued for a domain via Certificate Transparency logs. Great for discovering forgotten subdomains.

- SSL Analyzer – cert chain, TLS versions, HSTS, expiration. Faster than SSL Labs.

- DNS + SSL Check – DNS records and SSL health in one view.

- Security Headers – HSTS, CSP, X-Frame-Options analysis with recommendations.

Built with Rust on GCP Cloud Run. Happy to talk about the architecture or any feedback on what would make these more useful.