It seems that secrets are stored in plain text. A SQL dump reveals them all.
It would be nice to have the option to store them encrypted in MySql.
It seems that secrets are stored in plain text. A SQL dump reveals them all.
It would be nice to have the option to store them encrypted in MySql.
Just for the sake of clarification: data in MySql is NOT encrypted and there is no mechanism built-in in phab to do so. Correct?
IMO, this is so critical that I'd leave a separate task for that.