Hacker News Reader

Not familiar with Microsoft’s offering, but $WORK uses a similar product and it is the worst. All sorts of technical and usability problems. Way more friction than doing things the easy way.

I grit my teeth every time I have to interact with it. Not surprised some people use any other solution at hand.

View on HN

Yeah, in a way I was being tongue in cheek about it.

The truth is that internally they probably don't like using their own solution for key management.

I usually opt for environment variables for secrets, which I know isn't awesome, but keeps them out of code at least.

Regardless, secrets should never ever be committed, even in a private repo (or one you think is private).

Reply on news.ycombinator.com