Ask HN: How are teams sharing secrets?

3 pointsChartsNGraffs9y ago6 comments

What's the best way your team has found to manage secrets for things like db passwords, admin login credentials, etc.?

6 comments

mtmail9y ago

94 comments on similar discussion two weeks ago

Ask HN: How are credentials managed at your company? https://news.ycombinator.com/item?id=12396883

marvel_boy9y ago

Instead of requiring only a password is better to use Two-Factor authentication.

tptacek9y ago

2FA doesn't work so great for Postgres.

anarazel9y ago

You can do stuff with gssapi / kerberos. Or, if you consider that 2FA, you can use client certificates in addition to passwords. Interactive 2FA probably imo doesn't make that much sense for a database.

1 more reply

j / k navigate · click thread line to collapse