Does Infisical support an HSM?
At the moment we don't offer support for HSM but please make a request for it in our github issues https://github.com/Infisical/infisical/issue
Infisical – open-source HashiCorp Vault alternative
21–30 of 109 posts
Re: Infisical – open-source HashiCorp Vault alternative
#22Backed by another corporation trying to monetize it. This will go well. This repo available under the MIT expat license, with the exception of the ee directory which will contain premium enterprise features requiring a Infisical license. I just sprained my eye sockets from rolling my eyes too hard.
What's wrong with monetization? You understand that OSS's significant problem is a lack of funding, where authors don't want or don't know how to monetize their product? Sentry looks like a good model for OSS, and it's proof that you can make a living from OSS. I also don't have anything against "enterprise features" for which you need a license, while most features are available in OSS version.
Open Source is not a business model. It's marketing, for sure, but you can't make money solely by giving away your product.
Every single open source company eventually learns this when they have a strong competitor. Eventually you are forced to stop being open source, because no business wants to compete solely on the strength of their service quality.
Moreover: a community is antithetical to a corporation's interest in the software. Corporations don't give a shit what people want changed in the code, for good reason: their purpose is to make money, not make good software. So business source always ends up annoying and limited while community open source provides the functions the users need, in the way they want them.
So, yeah, you can make money while letting people read your source code. But the actual quality of the end result, the user's happiness, the ability to contribute to the whole thing, is much different in a real community project.
Re: Infisical – open-source HashiCorp Vault alternative
#23EnvKey ( https://www.envkey.com/ ) is another OSS alternative to Vault with a bit more focus on security (disclaimer: I'm the founder). We have a comparison with Vault here: https://www.envkey.com/compare/hashicorp-vault/ We'll probably write up a comparison with Infisical soon as well but I'd say the main thing is that our end-to-end encryption has no opt-outs (as Infisical does for many of its integrations), and we…
In my opinion, "having no opt-outs" is not a benefit. It's by definition having less functionality. Infisical offers native SDKs, API, and CLI too + many other features (such as native integrations, webhooks, dashboard, etc).
Re: Infisical – open-source HashiCorp Vault alternative
#24Last time I saw this mentioned here a few weeks ago someone mentioned that the whole code has no tests.
Is that (still) true? If so: No
Re: Infisical – open-source HashiCorp Vault alternative
#25HashiCorp switched Vault from MPL to BSL license yesterday. The terms of how they define "competitive" products are pretty vague, which means that any commercial product that uses Vault under the hood is at risk of violating the terms of the new license. Moreover, even if it's not violating the terms of license now, it doesn't mean that HashiCorp will not change its mind in future. Ultimately, it just means that Hash…
Regarding the open core and proprietary extensions model. The usual endgame of that is what hashicorp seems to have just done - deprecate the open source part in favour of the part that makes money.
This bait&switch is no longer novel. Be open source friendly to leverage the community and then pull the rug is probably taught strategy in VC themed business schools by this point.
If you're going to do the same thing in a while anyway, one may as well stay with hashicorp. Is there a reason to believe you will remain viable as an open source product long into the future?
Re: Infisical – open-source HashiCorp Vault alternative
#26I remember trying Infiscal, and I was excited to see how good it is, the feature list in the OSS version, and its ease of use... What cooled me off is this limitation in OSS: "3 Infisical Projects, 3 Environments & 5 Team Members." That's not nice. It's OK to limit SSO access to OSS and stuff like that. But limiting essential features - team members is a no-go.
This is very strange. There is no such limitation. You can create as many projects and environments as you need. You can also add an unlimited number of users
Second this, we don’t have any such limitations on OSS that is you can totally self-host Infisical on your own infrastructure and have unlimited users, projects, and environments.
I think there may be a mix-up here with Infisical Cloud which is the managed service with subscription tiers.
Re: Infisical – open-source HashiCorp Vault alternative
#27I remember trying Infiscal, and I was excited to see how good it is, the feature list in the OSS version, and its ease of use... What cooled me off is this limitation in OSS: "3 Infisical Projects, 3 Environments & 5 Team Members." That's not nice. It's OK to limit SSO access to OSS and stuff like that. But limiting essential features - team members is a no-go.
This is very strange. There is no such limitation. You can create as many projects and environments as you need. You can also add an unlimited number of users
Check the pricing page:
https://infisical.com/pricing
Yeah, I've noticed that the app is not enforcing that limit ATM, but the limit was clearly visible in the dashboard when I tried it a couple of months ago (OSS, docker)
Re: Infisical – open-source HashiCorp Vault alternative
#28Does Infisical support an HSM?
We have heard many requests for it recently. If you could create an issue for it on our Git repo, we will make sure to prioritize it!
Re: Infisical – open-source HashiCorp Vault alternative
#29Earlier quoted context omitted.
This is very strange. There is no such limitation. You can create as many projects and environments as you need. You can also add an unlimited number of users
Second this, we don’t have any such limitations on OSS that is you can totally self-host Infisical on your own infrastructure and have unlimited users, projects, and environments. I think there may be a mix-up here with Infisical Cloud which is the managed service with subscription tiers.
OK, that's great to hear. You may consider removing the "Usage & Billing" page from OSS when self-hosting. Because I thought I'd have to upgrade OSS with a business license once I reached the limit.
Re: Infisical – open-source HashiCorp Vault alternative
#30Backed by another corporation trying to monetize it. This will go well. This repo available under the MIT expat license, with the exception of the ee directory which will contain premium enterprise features requiring a Infisical license. I just sprained my eye sockets from rolling my eyes too hard.
What's wrong with monetization? You understand that OSS's significant problem is a lack of funding, where authors don't want or don't know how to monetize their product? Sentry looks like a good model for OSS, and it's proof that you can make a living from OSS. I also don't have anything against "enterprise features" for which you need a license, while most features are available in OSS version.
There's nothing wrong with monetization. There's just something wrong with making parts of the code proprietary. There'd be nothing wrong with monetizing by picking a copyleft license and selling exceptions, selling hosting, or selling support, for example.