Hello Everyone!
I am working on a project and I am trying to find the best way to securely store and handle secret keys (like secretEncryptKey, AWSKeys, etc.) without exposing them in code. I am looking for solutions that do not include:
- Hardcoding the secrets directly in the code.
- Using Firebase or similar services to fetch the keys.
- Storing secrets in the build.gradle file.
- Relying on.gitignore to prevent keys from being tracked by version control.
I am seeking some secure and scalable ways of handling secretsโbe it a third-party service, encryption methods, or a secure storage solution that integrates well with the project. Any suggestions or best practices would be much appreciated!
Thanks in advance for your insights!
submitted by /u/FortuneFit705
[comments]
Source link