Hacker News new | ask | show | jobs
by sureglymop 327 days ago
May I suggest the ability to specific a path to a file that it is then read from.
1 comments

Like an ACL file?
No, like a path to a file containing the secret/passphrase that the program can then read it from. I am not a fan of putting secrets directly into environment variables.

Environment variables are prone to leak or be passed to child processes when it is not desired. But if they are just a file path/pointer to where the secret is, that is mitigated somewhat as one then would still need access to that file.