79098426

Date: 2024-10-17 14:02:19
Score: 0.5
Natty:
Report link

There are a few reasons why this isn't common, from my experience. This isn't an exhaustive list, but here are a couple:

  1. Separation of Concerns - Embedding secrets in your binary complicates key management and environment configuration. Ex: if you need to rotate a key, you’d have to rebuild and redeploy the binary. Similarly, managing different environments (dev/stg/prd) becomes difficult, as you'd need separate binaries for each, with their respective secrets embedded. Keeping secrets external allows for easier updates and environment separation without touching your app code.
  2. Security Risks - If someone gains access to your binary, they can potentially use it to interact with your systems directly, without needing to hunt for or extract the embedded secrets.
Reasons:
  • Long answer (-0.5):
  • No code block (0.5):
  • Low reputation (0.5):
Posted by: Jered