Infisical
Infrastructure
secrets management
SHOW HN2022
232points
97comments
#219of 2,570 in 2022
Top 9%of 2022 by points
How HN took it
CuriousMostly questions and neutral comments
10 positive, 23 neutral or asking, 1 mixed, 12 critical, out of 46 comments about the project. Thread score +0.03.
Privacy: 2 for, 3 againstDesign: 0 for, 4 againstExecution: 0 for, 2 againstIdea: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Simpler and easier to use than Vault
From 3 comments
Reminds be a bit of Vault but easier, I'll give it a try with Docker!
Alifatisk on HNThis looks great! Vault is such a headache sometimes... Will consider switching
shrisukhani on HNObligatory how does this compare to Vault or Conjur?
candiddevmike on HN
Self-hosting option
From 1 comment
Ahhh, a self-hosting option. I might actually take a look at it! I'm so tired of systems handling highly-confidential information (such as passwords and secrets material) being…
turtledragonfly on HN
Generous free plan
From 1 comment
Thank you! Besides the CLI and browser UI, we also support a range of integrations (we're still working on this but you can already see some of them in the Integrations section…
vmatsiiako on HN
Objections
Environment variables are a poor way to pass secrets
From 2 comments
Environment variables are not a good way to pass secrets around. For a list of reasons see this 2017 blog post:…
jbotz on HNI just can’t get over using environment variables for this type of stuff. An attacker can bootstrap a lot just from compromising an ssh login. Platforms like JWS had the right…
mberning on HN
No external security audit yet
From 1 comment
I didn't see any reference to an external security audit on your website, so have you done one and if not are you planning to? All serious products in this space publish these…
thamer on HN
Only MongoDB supported
From 2 comments
Almost any other standard database would be a better choice: Postgres, MySQL, even Redis. Most companies avoid using MongoDb and lack the staff needed to administer it properly.…
linuxdude314 on HNOh, Mongo is a major turnoff. The only sensible data store to support in 2022 and beyond is Postgres, maybe SQLite IMO.
9dev on HN
Flat secret organization without directory structure
From 1 comment
Congrats on the launch! The first thing that strikes me is the flat organizational structure of secrets. We have at least 45 KV secrets per environment in Vault organized in a…
NathanFlurry on HN
Requests
Postgres or other database support
From 3 comments
Oh, Mongo is a major turnoff. The only sensible data store to support in 2022 and beyond is Postgres, maybe SQLite IMO.
9dev on HNPostgres! But better yet you might want to make sure there is an abstraction layer so people can plug stuff in. It’s a extra work but it only gets harder to do later.
hardwaresofton on HNYes, we're quite familiar with SOC guidelines. We will be including all of Security, Confidentiality, Privacy, Availability, and Processing integrity categories into the SOC 2…
vmatsiiako on HN
API for programmatic secret retrieval
From 1 comment
Is there an API to programmatically retrieve secrets or is it CLI only? On a previous project I used the HVAC python library to get secrets from Vault and configure a Django…
ponytech on HN
Use without the CLI
From 1 comment
Love this project but, please, give us a way to use it without the CLI. Not really keen on having the CLI on my package.json
mariopt on HN
Support for systemd credentials
From 1 comment
You might want to look into supporting systemd's credentials interface to cover 95% of non-K8S Linux systems out there with a generic solution. https://systemd.io/CREDENTIALS/
eliaspro on HN
Questions
How does it compare to Vault or Conjur?
From 1 comment
Obligatory how does this compare to Vault or Conjur?
candiddevmike on HN
Is it secure by default and what is the architecture?
From 2 comments
This looks great! But after looking through the docs and Github, I don't know what the architecture is beyond there is a CLI and a browser UI that interact with some sort of…
gregwebs on HNThank you. I wasn't asking if the product could do that through integrations but whether it operates insecurely by default.
IncRnd on HN
Does it run a security audit or SOC 2?
From 2 comments
I didn't see any reference to an external security audit on your website, so have you done one and if not are you planning to? All serious products in this space publish these…
thamer on HNHas anyone on staff been through a soc audit? Which trust criteria will be used? Does the app support data stores other than mongo?
bearzdev on HN
Alternatives named
HashiCorp Vault
From 2 comments
I didn't see any reference to an external security audit on your website, so have you done one and if not are you planning to? All serious products in this space publish these…
thamer on HNObligatory how does this compare to Vault or Conjur?
candiddevmike on HN
Doppler
From 1 comment
Is this like an open-source version of Doppler? Love Doppler.
mousetree on HN
Conjur
From 1 comment
Obligatory how does this compare to Vault or Conjur?
candiddevmike on HN
vaultwarden, gopass, SOPS, dotenv
From 1 comment
There is vaultwarden, gopass, Vault, SOPS, Conjur, dotenv, etc.
encryptluks2 on HN