“All the hassle of exchanging keys on different machines, adding and removing keys from the agent, entering passphrases from keys, is now just one biometric authentication,” Marcel Kersten, a software Developer at ComLine GmbHd, said in a statement. Then, with a built-in SSH agent, users can push code to GitHub and authenticate other SSH workflows in a terminal by simply scanning their fingerprints, increasing security with less effort.ĭevelopers no longer need to remember or type key passphrases, manually copy keys to new devices, or store files on their disk, thereby avoiding weak encryption of SSH keys and other security risks. To help avoid errors, 1Password for the browser will autofill a developer’s public keys into popular sites, including GitHub, GitLab, BitBucket and Digital Ocean. The new features in the Developer Tools offering include SSH key management, which allows developers to store and use SSH keys with just a few clicks. What’s more, he continued, 61 percent of projects are delayed due to poor secrets management. He added that one in three IT DevOps workers say they will share secrets over insecure channels, if it helps them get their work done faster. But a secret in code is a secret told.”Ĭiting a study by 1Password, its Chief Product Officer and General Manager of Emerging Solutions Akshay Bhargava told TechNewsWorld that one in four employees at IT DevOps companies have secrets in 10 or more locations and have shared them with colleagues using insecure channels, such as in an email or Slack message. “In too many cases,” he told TechNewsWorld, “these secrets are being stored in code. “Historically, one of the biggest constraints to secure coding and operations was tools to securely manage secrets - the passwords and keys that are needed to securely interconnect components,” observed Casey Bisson, head of product and developer relations at BluBracket, a provider of code security solutions in Palo Alto, Calif. The tools will also help simplify complex processes and improve security practices to ensure data is protected, without slowing down the development pipeline, it added, as well as provide developers with secure access to the secrets they need wherever they are, regardless of the device they are using. Launched under the name Developer Tools, 1Password declared the new features will help developers easily and securely generate, manage and access secrets in their normal workflows.
A password manager maker is trying to encourage software developers to adopt more secure secrets management with some new features added to its flagship product.
0 kommentar(er)
