Secrets
State of Application Secret Delivery and Audit Practices – 2019
The State of Application Secret Delivery and Audit Practices should help you explain to others why delivering application secrets is challenging, the risks of unsafe practices, and a general approach for improving your application secret delivery process.
Bootstrapping Trust – Terraform+VMWare+Chef
Lack of understanding how to deliver secrets to applications securely is the biggest challenge identified by DevOps practitioners in the Secret Delivery and Audit Practice study. This post describes how you can deliver secrets securely when using VMWare, Terraform, and Chef.
Should your Spidey sense tingle when discussing REDACTED?
There might be a relationship between an easy to measure factor that I’ll leave unnamed and Risk to your secrets. Please contribute your data.
How to lose a secret
Quick tophat: If you have 8 minutes I’d really appreciate your support with my secret delivery and audit research, by completing this anonymous questionnaire: https://www.surveymonkey.com/r/BL7K385 Have you ever accidentally exposed a password, api key, or other secret? The romantic version of this is like putting a message in a bottle afloat on the sea. Will
Research: Application Secret Delivery and Audit Processes
I am researching how people currently deliver secrets to applications, audit their use, and what they would like to improve and I need your help.
Delivering Secrets to Applications, Securely
I synthesized and expanded what I’ve been sharing about delivering secrets to applications into a 1 hour talk and presented it at the Phoenix DevOps meetup on Wednesday. This talk covers (Recording (YouTube), Slides (Google)): the fundamental challenges of handling secrets, including The First Secret Problem common ways you can lose control of them in