Skip to content

RFC: pass sensitive values inside a volatile file instead of command line arguments? #2

@truatpasteurdotfr

Description

@truatpasteurdotfr

Hi,

Not sure it is relevant with latest curl version: would it make sense to pass the sensitive arguments inside a volatile file instead of command line arguments to avoid leaking them on a multi user machine.

  • using the same credential file/config/auth and keep the other arguments visible
  • pass eveything inside a file mkemp generated file which his deleted after use

ref: https://everything.curl.dev/cmdline/passwords and https://everything.curl.dev/cmdline/configfile

Cheers

Tru

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions