You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
The problem can be that storing config on the local filesystem can be vulnerable. Session tokens are stored in it for Privilege. A conjur.conf and .netrc are created for Conjur.
Describe the solution you'd like
Placing this information inside a secured store can help to reduce the potential attack surface for a developer or operator. Mac OSX Keychain, Linux Keyring, Windows Credential Manager, with extensibility possibilities to other 3rd party tools such as Conjur, wincred, and more.
Describe alternatives you've considered
An attempt was made to create the config as a binary that is only readable by the CLI client, however this can still be de-obfuscated and is just security through obscurity.
The text was updated successfully, but these errors were encountered:
Is your feature request related to a problem? Please describe.
The problem can be that storing config on the local filesystem can be vulnerable. Session tokens are stored in it for Privilege. A conjur.conf and .netrc are created for Conjur.
Describe the solution you'd like
Placing this information inside a secured store can help to reduce the potential attack surface for a developer or operator. Mac OSX Keychain, Linux Keyring, Windows Credential Manager, with extensibility possibilities to other 3rd party tools such as Conjur, wincred, and more.
Describe alternatives you've considered
An attempt was made to create the config as a binary that is only readable by the CLI client, however this can still be de-obfuscated and is just security through obscurity.
The text was updated successfully, but these errors were encountered: