ergoplatform / oracle-core

Core off-chain component of Oracle Pools
Apache License 2.0
62 stars 37 forks source link

Consider moving node API key to loading from file set via cmdline or env var #218

Closed greenhat closed 1 year ago

greenhat commented 1 year ago

Following the discussion - https://t.me/c/1629893971/483 Also, consider storing a wallet password and unlocking the node.

greenhat commented 1 year ago

Storing the password in a separate file and passing the filename to the program can be slightly more secure, but only if that file is properly secured. However, a more secure approach would be to use environment variables. Environment variables are not usually stored on disk, so they are less likely to be exposed in a file system breach.