key-management – Tarik Billa

What is the appropriate way to manage API secrets within a Google Apps script?

November 28, 2023 by Tarik

There is no right or wrong answer. There are numerous factors to consider: If this is for/in G-Suite, then your G-Suite admins’ll have (or can get) access to anything. This may or may not be an issue. If you put the data in a sheet, anyone that has read access to the sheet can see … Read more

How to properly do private key management

May 13, 2023 by Tarik

I’m familiar with the pain you’re going through. We struggled to update an old EFT system towards PCI compliance. Key management was certainly (from my software point of view) the most challenging part. I think I also stumbled into the NIST Recommendations for Key Management that Martin posted, and got incredibly frustrated with the lack … Read more