That ia a very interesting question... and it comes down to another one:
How safe can it be to store a Password in the environment? How could an
attack get an environment information.
If that is safe, then encrypting this something like AES256 would be safe...
PS: maybe storing tha password in another user's environment and using
another small app to fetch it
Alain
=== Minha MesaXYZ: <http://mesa-reprap.blogspot.com.br/> ===
Em 27-12-2013 13:31, Reginald Choudari escreveu:
Hello, this morning I was pondering on a good way to store passwords
server-side to be used by a Node app. I would like to publish the
app's code on GitHub but obviously would not want to publish my
passwords ...
One method I have seen before was to add passwords to the environment
vars in the server's local .bash_profile, and then have the Node app
access these env vars in the code. Could this be a sufficient (and
secure) way?
Thanks,
Reginald
--
--
Job Board: http://jobs.nodejs.org/
Posting guidelines:
https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
You received this message because you are subscribed to the Google
Groups "nodejs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/nodejs?hl=en?hl=en
---
You received this message because you are subscribed to the Google
Groups "nodejs" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
--
--
Job Board: http://jobs.nodejs.org/
Posting guidelines:
https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
You received this message because you are subscribed to the Google
Groups "nodejs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/nodejs?hl=en?hl=en
---
You received this message because you are subscribed to the Google Groups "nodejs" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
