Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Environment variables are not more secure than command line parameters! It's such a common misconception that because environment variables are "not seen" they can serve as a secure channel. They emphatically cannot.


Secrets being hidden ("not seen") is really their main quality...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: