Designing Security Policies for dotsecenv
A long weekend, a SUID dead end, and the simpler design that shipped.
Read →#dotsecenv
2 articles
-
-
Why Your .env Secrets Shouldn't Be Plaintext on Disk
Why plaintext .env files are a prime target for supply-chain attacks, and how dotsecenv keeps developer secrets encrypted at rest with GPG.
Read →