I'm just curious, don't they have something like "gradual rollout" to update their app? They just bulk-update simultaneously across entire agents? No way. Something is a bit off for me. But there are good lessons to learn for sure.
I read that they pushed a new configuration file, so possibly they don't consider that a "software update" and pushed it to everyone. Which is obviously insane. If I am publishing software, it doesn't matter if I've changed a .py file or a .yaml file. A change is a change and it's going to be tagged with a new version.
That's so cool! If I knew this, I could get some use-case scenario inspirations. But still, you are able to sign your content of diaries with the cocert.
Actually, we store the passwords inside the PEM file itself, which is encrypted by TUF [0].
> If you can store the password securely can you not then also store the private keys securely?
You don't have to store the private keys securely. On the contrary, you can store your private keys publicly, if the decryption password strong enough.
If you want to decrypt keys in the pipeline, of course your decryption keys still need to be stored securely. Which is why I added some KMS providers in the use-case diagram. [1]
Excellent job! Maybe you are already thinking about it, but... You can add a Search Bar and Go version & language selection for the documentation. (i.e. see (bottom left): https://docs.godotengine.org/en/stable/)
Also I just published this on /r/golang if you do not mind. :)
Thank you for those suggestions. Adding a search bar is already in my todo list. I will probably use Algolia.
Thank you for posting this on reddit ! I tried to do it but I made a mistake in the title, so I deleted the post and posted again (I never posted on reddit before). Now it seems that my second post is not really visible.
