Talk Python to Me is a weekly podcast hosted by developer and entrepreneur Michael Kennedy. We dive deep into the popular packages and software developers, data scientists, and incredible hobbyists doing amazing things with Python. If you're new to Python, you'll quickly learn the ins and outs of the community by hearing from the leaders. And if you've been Pythoning for years, you'll learn about your favorite packages and the hot new ones coming out of open source.
#418: How To Keep A Secret in Python Apps
June 02, 2023
01:07:11
64.76 MB
Downloads: 0
Think about the different APIs and databases your application works with. Every one of them requires either an API key or a database connection string that itself contains a password. How do you let your application access this sensitive information without storing it in source code or putting in other compromising locations? We have Glyph Lefkowitz on the show to share his security fable as well as just good advice for keeping secrets out of Python code.
Links from the show
Glyph on Mastodon: @glyph@mastodon.social
ShhGit: github.com
Encrust: github.com
GitHub Security Alerts: github.com
CIA Triad: fortinet.com
pinpal: github.com
XKCD Authorization: xkcd.com
Tokenring: github.com
AWS Vault: github.com
Gimme-AWS-creds: github.com
Secrets in GitHub Actions: github.com
Python Client for HashiCorp Vault: python-hvac.org
Pomodouroboros app: github.com
DateType: pypi.org
Haveibeenpwned: haveibeenpwned.com
PEP 541: peps.python.org
Glyph's security talk at PyCon: us.pycon.org
Watch this episode on YouTube: youtube.com
Episode transcripts: talkpython.fm
--- Stay in touch with us ---
Subscribe to us on YouTube: youtube.com
Follow Talk Python on Mastodon: talkpython
Follow Michael on Mastodon: mkennedy
Sponsors
PyCharm
RedHat
Talk Python Training
Links from the show
Glyph on Mastodon: @glyph@mastodon.social
ShhGit: github.com
Encrust: github.com
GitHub Security Alerts: github.com
CIA Triad: fortinet.com
pinpal: github.com
XKCD Authorization: xkcd.com
Tokenring: github.com
AWS Vault: github.com
Gimme-AWS-creds: github.com
Secrets in GitHub Actions: github.com
Python Client for HashiCorp Vault: python-hvac.org
Pomodouroboros app: github.com
DateType: pypi.org
Haveibeenpwned: haveibeenpwned.com
PEP 541: peps.python.org
Glyph's security talk at PyCon: us.pycon.org
Watch this episode on YouTube: youtube.com
Episode transcripts: talkpython.fm
--- Stay in touch with us ---
Subscribe to us on YouTube: youtube.com
Follow Talk Python on Mastodon: talkpython
Follow Michael on Mastodon: mkennedy
Sponsors
PyCharm
RedHat
Talk Python Training