git - Is a private repository on github or bitbucket safe for storage of passwords? -


as understand, despite email servers use tls encrypt messages transfer between different targets , destinations,the contents on mail servers no means encrypted. that's reason why sending passwords via email not recommended.

on surface, it's appealing save sensitive information in git repositories sake of convenience. however, seems hit same issue mail server's dilemma.

so i'm wondering if saving passwords in private git repository likewise unsafe mail server.

thanks in advance!

please don't that.

storing passwords on thirdparty services bad idea, ones not designed secure data storage.

github has pretty detailed article security: https://help.github.com/articles/github-security/

they don't encrypt repositories on disk because, point out:

we not encrypt repositories on disk because not more secure: website , git back-end need decrypt repositories on demand, slowing down response times. user shell access file system have access decryption routine, negating security provides. therefore, focus on making our machines , network secure possible.

so, @ least, passwords accessible github employees.

private repos same non-private ones, they're not listed on website people aren't allowed see them.

plus, if stop paying, don't private repos become public?

do trust you're going give access repository not abuse passwords, , not publish them?

the problem presumably have "i have piece of software needs use database passwords , it's annoying have keep inputting them want put them in config file store in git".

one way solve problem make file containing passwords, passwords.json, , add .gitignore. commit repo passwords-example.json showing format of passwords.json, without real passwords (and presumably readme.md explaining how use this).


Comments

Popular posts from this blog

javascript - Thinglink image not visible until browser resize -

firebird - Error "invalid transaction handle (expecting explicit transaction start)" executing script from Delphi -

mongodb - How to keep track of users making Stripe Payments -