Conversation
✅ Deploy Preview for getsops ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
1cac437 to
5f992d1
Compare
Signed-off-by: Felix Fontein <felix@fontein.de>
5f992d1 to
95b6fa2
Compare
There was a problem hiding this comment.
I'd like us to think about the key features of the project. Thinking out loud, heres what I have in mind for top level features:
- Encrypt/Decrypt files
- Multi-format file support
- Local encryption options
- Cloud/Non-Cloud KMS integrations
- Full lifecycle management
- Lightweight
We can build out the rest based on the agreed upon top level list
SOPS isn't really good at encrypting and decrypting files. It changes formatting of YAML/JSON/INI/DotEnv files, it works badly with large files (huge memory requirements since the files have to fit multiple times into memory). What it is IMO very good at is encrypting (structured) configuration files, and it's OK for small-ish binary files.
One big feature IMO is access management through identities (which is realized through key groups and Shamir Secret Sharing).
Yes, though IMO we shouldn't concentrate on specific features, but on the value they bring to users through their interaction. Like key groups and Shamir secret sharing on its own are features that don't help users much to decide whether SOPS fits their use-case. But knowing that you can manage access to files through identities, with the option to require multiple identities to be available to decrypt (and edit) a file is more helpful. If users want to know how exactly this works, they can find out in the docs. (Having some links there would be helpful, but I think that should wait until the docs themselves are reorganized. I have some plans for that as well...) |
I replaced the provisional content of the landing page with (IMO) more fitting content. Feedback welcome!
If you would like other icons, here's the catalog: https://fontawesome.com/search?ic=free-collection