Hacker News new | ask | show | jobs
by linuxdude314 1277 days ago
It very much sounds like security is an after thought.

Seems cool if you need to sync env vars, but you should probably just be using battle tested etcd+confd or console+console template.

This product seems to be based on some incredibly misguided principles (from a security perspective). I don’t think a technology like this has any place in a modern enterprise.

Part of the whole point of using a secret manager is to avoid storing them in environment variables.

That coupled with the lack of an API and the use of MongoDB are just too many red flags for me to ignore.

1 comments

Thanks - sometimes it is so helpful to see other publish your own thoughts. I was wondering why such a product is posted here.