Assume the Key Will Leak

Don't design for the day the secret is safe.
Design for the day it's on the internet.

Because eventually it is.

In a log. In a screenshot.
In a repo that went public by accident.

The question isn't "how do I keep it secret."
It's "what happens the hour it isn't."

Can you rotate it in minutes?
Does it expire on its own?
Does it only open one door, not all of them?

A secret you can't rotate quickly
isn't a secret. It's a liability with a countdown.

Least privilege and fast rotation
are what turn a breach into an inconvenience.

Plan for the leak. Then it's just Tuesday.

– Serguey Asael Shinder