Heroku配置变量对敏感信息安全吗？ [英] Are Heroku Config Vars safe for sensitive information?

问题描述

我在一次交谈中偶然发现，Heroku上的ENV（config vars）并不是存储敏感变量的最安全的地方。我认为情况正好相反，我的Google-fu在这里没有帮助我。任何想法？

I overheard on in a passing conversation that ENV (config vars) on Heroku is not the safest place to store sensitive variables. I thought the opposite was true, and my Google-fu is not helping me any here. Any thoughts?

推荐答案

Heroku config vars被设计为可以安全地存储敏感信息。所有配置变量都以加密形式存储并安全存储。这些只是在测试仪本身启动应用程序时才解密和加载。

Heroku config vars are designed to be safe for storing sensitive information. All config vars are stored in an encrypted form and safely stored. These are only decrypted and loaded when booting your app in a dyno itself.

这篇关于Heroku配置变量对敏感信息安全吗？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！