<story><title>Keywhiz: Square&apos;s system for distributing and managing secrets</title><url>https://square.github.io/keywhiz/</url><text></text></story><parent_chain></parent_chain><comment><author>mtsmith85</author><text>Coincidentally Coda Hale&amp;#x27;s sneaker (&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;codahale&amp;#x2F;sneaker&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;codahale&amp;#x2F;sneaker&lt;/a&gt;) just popped up in my Twitter feed earlier. Sneaker stores the secrets on S3. Keywhiz stores the secrets in a central database and then ephemerally on the client servers. I guess if you started with something like sneaker on AWS using Amazon&amp;#x27;s KMS you could then move to Keywhiz if you eventually moved out of AWS.</text></comment>
<story><title>Keywhiz: Square&apos;s system for distributing and managing secrets</title><url>https://square.github.io/keywhiz/</url><text></text></story><parent_chain></parent_chain><comment><author>tdicola</author><text>Wow this looks great!  If the whole online payment system thing doesn&amp;#x27;t work out for square the engineers there should fire the entire management chain and pivot into a developer services company, because the projects and libraries they publish are just stellar (particularly the Android stuff).</text></comment>