Open Source Security Best Practices for Developers, Contributors, and Maintainers

From the creator

Armon Dadgar (@armon), HashiCorp CTO and co-founder, and Aaron Schlesinger (@arschles) talk about how and why HashiCorp Vault is a security and open source product: two things traditionally considered at odds. You'll learn how to avoid secret sprawl and protect your apps' data, ways for contributors and maintainers to enhance the security of any project, and why you should trust no one (including yourself). 01:43 What is secret sprawl and how do we avoid it? 03:17 What is the 1,000 eyes principal? 06:35 The tripod approach 08:47 Additional resources Learn More: https://opensource.microsoft.com/ Create a Free Azure Account: http://aka.ms/OpenSourceShow/16 HashiCorp Vault on Azure: https://aka.ms/azfr/523 Using HashiCorp Vault with Azure Kubernetes Service: https://aka.ms/azfr/524 Learn more about HashiCorp Vault: http://www.vaultproject.io Check out HashiCorp Learn: https://learn.hashicorp.com/ Read HashiCorp Blog: https://www.hashicorp.com/blog Learn more about secret sprawl: https://www.hashicorp.com/resources/what-is-secret-sprawl-why-is-it-harmful

Published 2019-02-12 · Watch on YouTube ↗
Availability and playback restrictions are controlled by the original channel.