EnvKey 2.0
Infrastructure
secrets management
SHOW HN2022
How HN took it
2 positive, 17 neutral or asking, 4 mixed, 10 critical, out of 33 comments about the project. Thread score -0.16.
Privacy: 1 for, 3 againstExecution: 1 for, 3 againstPricing: 0 for, 3 againstDocs: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Client-side end-to-end encryption that does not trust the host server
From 2 comments
Yes, EnvKey uses client-side end-to-end encryption and never sends secrets to the host server in plaintext (whether it's self-hosted or you use EnvKey Cloud). So there would be…
danenania on HNIf the host server is compromised, attackers still will not be able to access secrets. Vault attempts to mitigate this with its 'seal' functionality, but in practice if an…
danenania on HN
Developer-friendly CLI with watch and reload features
From 1 comment
Objections
Docs tone and 'don't README' framing felt off-putting and unclear
From 1 comment
Initially, I was pretty thoroughly perplexed by what this actually did since all I did was click the original link and didn't even see this post text. I figured it out through…
kafkaIncarnate on HN
Pricing page unclear and full of buzzwords
From 1 comment
How is this tool different to Hashicorp's Vault? Also, if I'm using "Enterprise Self Hosted", which means I am doing the hosting myself - am I not responsible for all the…
zmxz on HN
v1 to v2 accounts are not compatible, forcing migration
From 1 comment
I'm a happy EnvKey customer since the end of 2018. After me and my team tried different solutions in the past (back in 2017 and 2018) to manage secrets on our infrastructure (we…
psanchez on HN
Requests
Clearer pricing page
From 1 comment
How is this tool different to Hashicorp's Vault? Also, if I'm using "Enterprise Self Hosted", which means I am doing the hosting myself - am I not responsible for all the…
zmxz on HN
Terraform integration guide
From 1 comment
How does this compare to Doppler[1]? Is there a way to handle the configuration in Terraform? [1] https://www.doppler.com/
mattste on HN
SOC or ISO27001 certification
From 1 comment
Any plans for SOC or ISO27001 certification?
NAR8789 on HN
Questions
How does it compare to Doppler and HashiCorp Vault
From 2 comments
How does this compare to Doppler[1]? Is there a way to handle the configuration in Terraform? [1] https://www.doppler.com/
mattste on HNHow is this tool different to Hashicorp's Vault? Also, if I'm using "Enterprise Self Hosted", which means I am doing the hosting myself - am I not responsible for all the…
zmxz on HN
How is the web of trust implemented versus PKI
From 1 comment
From what I can see, public keys are checked by examining a signature chain which must terminate in the TrustedRoot. This sounds more like a traditional PKI than a web of trust.…
MattPalmer1086 on HN
Protection against cold boot or RAM dumps on client machines
From 1 comment
Except for a cold boot style attack right? https://en.m.wikipedia.org/wiki/Cold_boot_attack I’m assuming the client side code isn’t keeping the secrets in some kind of TPM right?…
koolba on HN
Alternatives named
HashiCorp Vault
From 1 comment
How is this tool different to Hashicorp's Vault? Also, if I'm using "Enterprise Self Hosted", which means I am doing the hosting myself - am I not responsible for all the…
zmxz on HN
Doppler
From 1 comment
How does this compare to Doppler[1]? Is there a way to handle the configuration in Terraform? [1] https://www.doppler.com/
mattste on HN
ansible-vault
From 1 comment
Is it a replacement for ansible-vault too? What are the advantages of a solution involving a server?
weinzierl on HN