Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Infisical – open-source secret management platform

infisical.com

Post reply on HN
Print view View original

21–30 of 59 posts

Re: Show HN: Infisical – open-source secret management platform

#21

Post by oldtownroad »

vmatsiiako wrote: post #7
Zekio wrote: post #6

Earlier quoted context omitted.

wait, you need to pay to be able to use a yubi key for two factor?

We don't have support for this yet. Would you say you think this should be a free feature?

There’s a strong, widespread objection to hiding security features behind a paywall: https://sso.tax/

If 2fa is the only way you can differentiate in order to force enterprises to pay, it’s better to have a fee for security than to die because you can’t make money… but broadly, as a security company, you should aim for maximum security for every user.

If I were in your position, I’d start out by making security features available to everyone and then only if you feel you don’t have a choice would you put them behind a paywall — and at that point, you can grandfather existing customers in to these features for free.

Re: Show HN: Infisical – open-source secret management platform

#23

Post by irf1 »

recently interviewed one of the founders :)

Tony discussed the team’s background, how Infisical got started & joined Y Combinator, the open core business model, hiring, college students contributing to open source and lots more. 10min highlights: https://youtube.com/watch?v=T9oFAxu_jAM

Re: Show HN: Infisical – open-source secret management platform

#24

Post by Alifatisk »

vmatsiiako wrote: post #10
microflash wrote: post #9

The fact that there are no Java or Rust SDKs available makes this a non-starter for me to even consider it.

Java SDK was actually already developed by one of our community members (Piyush Chhabra) and has to be reviewed: https://github.com/piyushchhabra/infisical-java Rust SDK is coming soon too. SDKs are not the most popular way of using Infisical though. You should look into our CLI (which most of the folks use) and API

Any plans on Ruby?

Re: Show HN: Infisical – open-source secret management platform

#25

Post by vmatsiiako »

oldtownroad wrote: post #21
vmatsiiako wrote: post #7

Earlier quoted context omitted.

We don't have support for this yet. Would you say you think this should be a free feature?

There’s a strong, widespread objection to hiding security features behind a paywall: https://sso.tax/ If 2fa is the only way you can differentiate in order to force enterprises to pay, it’s better to have a fee for security than to die because you can’t make money… but broadly, as a security company, you should aim for maximum security for every user. If I were in your position, I’d start out by making security featu…

Completely understand this take! 2FA is by far not the only differentiator we can make between enterprise/free users. We're definitely trying to make sure that the maximum security is available for every (free) user.

Re: Show HN: Infisical – open-source secret management platform

#27

Post by vmatsiiako »

alchemist1e9 wrote: post #22
Maidul98 wrote: post #2

Hi HN. I’m one of the founders at Infisical. We’ll be hanging out in the comments in case you have any questions.

Is docker use required? I prefer lxd/lxc.

We currently offer Docker images to keep the environment size minimal. We might add more options in future

Re: Show HN: Infisical – open-source secret management platform

#28

Post by aliasxneo »

Nice work! This looks very promising. The only thing I would add is the difference in packages seems a bit weird:

- Five seems low for projects in the first tier

- Projects are unlimited in the second tier, but environments are not? Is that a technical limitation?

Re: Show HN: Infisical – open-source secret management platform

#29

Post by vmatsiiako »

aliasxneo wrote: post #28

Nice work! This looks very promising. The only thing I would add is the difference in packages seems a bit weird: - Five seems low for projects in the first tier - Projects are unlimited in the second tier, but environments are not? Is that a technical limitation?

Thanks for sharing this! No, this is not a technical limitation. These are just the usage numbers that we saw from our users – in other words, it is very rare that teams need to have over 10 environments.

What is your use case for having more then 10 environments per project?

Re: Show HN: Infisical – open-source secret management platform

#30

Post by vmatsiiako »

Alifatisk wrote: post #24
vmatsiiako wrote: post #10

Earlier quoted context omitted.

Java SDK was actually already developed by one of our community members (Piyush Chhabra) and has to be reviewed: https://github.com/piyushchhabra/infisical-java Rust SDK is coming soon too. SDKs are not the most popular way of using Infisical though. You should look into our CLI (which most of the folks use) and API

Any plans on Ruby?

Yes! You can keep track of it via this issue: https://github.com/Infisical/infisical/issues/435
Post reply on HN