Ask HN: What do you do about API keys?
By stickynotememo · 2026-09-12 · 1 points · 2 comments
Having them in plaintext always seemed like a bad idea. Forget agents accidentally reading .env; any random package you get from the AUR can trivially read all your keys. Ideally you'd have read permissions restricted to users/groups that need it, but since most software th…
Open the full discussion on BetterNews