himanshub16 / himanshub16/ProxyMan

Cypher Passwords on config files and erase them from environment variables

Open
#97 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
710
Forks
116
PR merge metrics
No merged PRs in 30d

Description

Hello,

First of all, thank you for suach a great product, very useful in our day to day.

I have a security concern, could it be possible to cypher with an **strong cypher algorithm** the passwords stored in configuration files and don't use them as environment variables ?

Is quite a big vulnerability to store passwords in clear text in configuration files and even more to be able to access them in environment variables

Cheers

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.