re: How does your organization pass secret keys around? VIEW POST

FULL DISCUSSION
 

Keybase has made this easy and rather painless, though I still think they have some work to do (e.g. why should we trust them?).

Other than that, home-grown tools that create secure secret lockers in github work OK, so long as you wrap the difficult PGP bits. At Rackspace, we had a template project for these kinds of things. (See github.com/racker/secure-template).

code of conduct - report abuse