Why You Should Be Using Ephemeral Credentials
In this post, we explore ephemeral credentials in Hashicorp Vault. And, we run through what implementation looks like. Keeping critical information protected should be at the heart of everything you do as a developer (beyond making sure the thing you’re developing actually works, of course). For many businesses, this means ensuring that your application or product is secure on all fronts. Secure connections. Secure platforms. And, perhaps most importantly, secure secrets. When we talk about secrets, we’re not talking about the time you stole a piece of gum from the corner store when you were four or that time your brother snuck out of the house. We’re talking about bigger things than that. Important things. Secrets are sensitive data that live within your system that require credentials to access. They can be anything from usernames and passwords to SSH keys and just about everything in between. It’s all the critical information that you don’t just want to keep safe, you need to keep i
Team Liatrio Keeping critical information protected should be at the heart of everything you do as a developer (beyond making sure the thing you’re developing actually works, of course). For many businesses, this means ensuring that your application or product is secure on all fronts. Secure connections. Secure platforms. And, perhaps most importantly, secure secrets. When we talk about secrets, we’re not talking about the time you stole a piece of gum from the corner store when you were four or that time your brother snuck out of the house. We’re talking about bigger things than that. Importa
related reading
- Digital hygiene – karpathykarpathy.bearblog.dev
- Why We Don’t Trust the Database With Authentication – Sturdy Statisticsblog.sturdystatistics.com
- Infisical | The modern security platform for developers and agentsinfisical.com
- Doing much better than your .env file | Mediummedium.com
- What is Private Key JWT: Deep dive into asymmetric client authentication — WorkOSworkos.com
- How to Manage GitHub Actions Secretsinfisical.com
- passwords - Demystifying Web Authentication (Stateless Session Cookies) - Information Security Stack Exchangesecurity.stackexchange.com
- Keyhive: Local-first access controlinkandswitch.com
- Cryptographic right answers | Latacoralatacora.com
- JWT should not be your default for sessionsevertpot.com
- What are passkeys and how do they work?clerk.com
- SSH keys - ArchWikiwiki.archlinux.org