kreiling.io

kreiling.io OP

Yeah in toy projects I’ll probably give it a wack, why not? Dynamic code loading is useful!

I’ll have to do much more research on it before I can do it in a work setting though..ha

0
Post #11
doma_dev

doma_dev

If you check that the code you get from your secret manager is signed with a non-revoked key and you have reasonable degree of assurance in your intrusion detection, evaluating signed code is perfectly fine. World runs on evaluating signed code.

It’s all about threat model, right? If your threat model is “my secret storage got compromised”, odds are, arbitrary code execution on your production servers has already happened by then.

But yeah, awesome thread, we were getting secrets one by one on bootstrap, and are currently moving to evaluating one signed secret instead.

0
Post #12
— All posts loaded —