From: "Wesley J. Landaker" <wjl@...>
Date: 2006-02-12T01:27:42+09:00
Subject: Re: why would i want to put my mysql password in the yml file?

--nextPart4137384.HxEC59SVPg
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Saturday 11 February 2006 04:18, Stefan Arentz wrote:
> Most app servers or frameworks like Spring allow you to
> use placeholders in configuration files. Like
>
>  <property name=3D"password" value=3D"${my.password}"/>
>
> and then simply start the app with -Dmy.password=3Dg3h31m

One thing to be very careful of with this kind of thing is that on every=20
operating system I'm familiar with, command line arguments are an=20
*incredibly* insecure place to have a password. Having it stored in a file=
=20
with the correct permissions that is read during execution is far more=20
preferable.

=2D-=20
Wesley J. Landaker <wjl@icecavern.net> <xmpp:wjl@icecavern.net>
OpenPGP FP: 4135 2A3B 4726 ACC5 9094  0097 F0A9 8A4C 4CD6 E3D2

--nextPart4137384.HxEC59SVPg
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQBD7g/f8KmKTEzW49IRAlAyAJ4rFL7JbcDSirxy08A/Q59qbIHvUQCfX6m+
k1IKDegrA58Bdhx/58Ktwso=
=vXPT
-----END PGP SIGNATURE-----

--nextPart4137384.HxEC59SVPg--