Skip to content

Competitor: Mozilla SOPS

Jump to bottom
Kyle Kamperschroer edited this page Jan 26, 2016 · 1 revision

What are they?

An editor for encrypted files. Can add keys to a given file, and set your key in the editor. Along the same lines as GitCrypt, but with the need for an additional editor. In exchange, keys can be revoked for particular users, instead of requiring everyone to use the same key.

Where does their secrets solution excel?

  • Somewhat simple?
  • Can integrate with KMS

Where does their secrets solution fall short?

  • No rolling of secrets without rebuilding and redeployment
  • Secrets are presumably decrypted at deploy time
  • No auditing of access
  • Every other huge security issue with secrets in source

Clone this wiki locally