atsign-foundation / at_client_sdk

The Dart implementation of atSDK used for implementing Atsign's technology into other software
https://pub.dev/publishers/atsign.org/packages
BSD 3-Clause "New" or "Revised" License
1.47k stars 31 forks source link

Discussion ticket: POC to use atprotocol for secrets management #1082

Open VJag opened 1 year ago

VJag commented 1 year ago

Is your feature request related to a problem? Please describe.

I believe a solution around atProtocol will be a cost-efficient solution for secrets management.

Describe the solution you'd like

  1. A secondary server can be used as a vault for secrets (passwords, API keys etc..)
  2. A secondary server can be made to accept connections from selected atSigns (clients)
  3. Each client can get its secrets through their respective atSigns
  4. Change in secrets can be propagated to the clients using reshare/notification

Describe alternatives you've considered

No response

Additional context

We might be discussing SSHNoPorts with the dev operations community; this could be yet another idea we can propose.

VJag commented 1 year ago

A rough representation of the idea. image_2023_07_03T07_37_13_931Z