How To Keep A Secret in Python Apps - Talk Python to Me Ep. 418
Think about the different APIs and databases your application works with. Every one of them requires either an API key or a database connection string that itself contains a password. How do you let your application access this sensitive information without storing it in source code or putting in other compromising locations? We have Glyph Lefkowitz on the show to share his security fable as well as just good advice for keeping secrets out of Python code.
▬▬▬▬ About the podcast ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
This video is the uncut, live recording of the Talk Python To Me podcast ( https://talkpython.fm ). We cover Python-focused topics every week and publish the edited and polished version in audio form. Subscribe in your podcast player of choice (100% free) at https://talkpython.fm/subscribe.
▬▬▬▬ Guests ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
Glyph on Mastodon: https://mastodon.social/@glyph
Glyph's security talk at PyCon: https://us.pycon.org/2023/schedule/pr...
▬▬▬▬ Links and resources from the show ▬▬▬▬▬▬▬▬▬▬▬▬
ShhGit: https://github.com/eth0izzle/shhgit
Encrust: https://github.com/glyph/Encrust
GitHub Security Alerts: https://docs.github.com/en/code-secur...
CIA Triad: https://www.fortinet.com/resources/cy...
pinpal: https://github.com/glyph/pinpal/
XKCD Authorization: https://xkcd.com/1200/
Tokenring: https://github.com/glyph/tokenring
AWS Vault: https://github.com/99designs/aws-vault
Gimme-AWS-creds: https://github.com/Nike-Inc/gimme-aws...
Secrets in GitHub Actions: https://docs.github.com/en/actions/se...
Python Client for HashiCorp Vault: https://python-hvac.org/
Pomodouroboros app: https://github.com/glyph/Pomodouroboros
DateType: https://pypi.org/project/datetype/
Haveibeenpwned: https://haveibeenpwned.com/
PEP 541: https://peps.python.org/pep-0541/
Listen this episode on Talk Python: https://talkpython.fm/episodes/show/4...
Episode transcripts: https://talkpython.fm/episodes/transc...
▬▬▬▬ Dive deeper ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
Listen to the Talk Python To Me podcast at https://talkpython.fm Over 250 hours of Python courses at https://training.talkpython.fm/courses Follow us on on Mastodon. Michael: https://fosstodon.org/@mkennedy & Talk Python https://fosstodon.org/@talkpython
