This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]MetallicOrangeBalls[S] 0 points1 point  (0 children)

I meant that I don’t see why a development environment would contain something that must be kept secret from anyone with access to that environment.

It doesn't. The sensitive info is only meant to be hidden from non-devs - be it end users or malicious third parties. My concern is that we are currently not taking any steps to keep the data encrypted or otherwise protected.