Comments (2)
I don't think this is something this project is useful for. It's based on the system keyrings where the use case is the user of the machine knows the keyring password and thereby can unlock whatever is stored there. If you can't provide the keyring password temporarily from "outside" then this doesn't protect anything.
from go-keyring.
Storing a symmetric encryption key in the keyring should be more secure than storing it in a file. It would be better secured against physical access as the keyring's contents are encrypted at rest.
The service and user values aren't meant to be sensitive. They can be set as plaintext config values passed to your app. The password is sensitive and should only be stored in the keyring.
from go-keyring.
Related Issues (20)
- Cannot get/set keys with account
- [Windows] naive (incorrect) conversion of byte slice to Go string HOT 3
- [Windows] Get, Set and Delete have unexpected and limiting behaviours HOT 2
- Support for keyutils
- Suspected race condition in secret service prompt handler
- Umlaut passwords fail to decode correctly on MacOS HOT 3
- [Linux/Ubuntu]When running compiled binary with sudo an error shows up HOT 4
- Comparison with 99designs/keyring HOT 6
- Feature request: add FreeBSD support via GNOME keyring HOT 13
- Build issue in 0.2.0 HOT 4
- Missing gitignore file
- err: encoding/hex: odd length hex string HOT 3
- Support secret transfer via dh-ietf1024-sha256-aes128-cbc-pkcs7 HOT 2
- writing large passwords in darwin leads to truncated password HOT 8
- KeepassXC: freezes and org.freedesktop.Secret.IsLocked HOT 7
- Allow injecting errors in mock provider
- Support Pass with GPG as a backend for Linux HOT 1
- -
- Feature request: Allow secrets to be stored in encrypted file
- how
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from go-keyring.