Approach to secret key management for .net desktop applications (not web apps)
Hi. I'm a hobby coder so please excuse my ignorance and pretend you're talking to a 1st year computer science undergraduate. I can author apps in wpf and use github.
I'm developing an app that leverages a third party web API for data. I want this app to be open source and available on github. However, the API requires an API key, developer name and password that I obviously want to encrypt. Thus, my puzzlement. Regarding deployment, it'll either be via github or as a downloadable file.
I'm pretty sure there's no-way to do this offline, as even if you encrypted the secrets, that code would be available on github.
AI's telling me to consider Key Management Services, but I'm a bit baffled by this. Youtube isn't delivering much and what there is only confuses me more. Also, are there any free key services, as this will just be a deploy and forget app, wouldn't want it to be crippled by an expired subscription (although some of what I read was saying it $0.02 dollars for 10,000 queries or something?)
So - what's the best way and any how-to links would be appreciated.
I'm developing an app that leverages a third party web API for data. I want this app to be open source and available on github. However, the API requires an API key, developer name and password that I obviously want to encrypt. Thus, my puzzlement. Regarding deployment, it'll either be via github or as a downloadable file.
I'm pretty sure there's no-way to do this offline, as even if you encrypted the secrets, that code would be available on github.
AI's telling me to consider Key Management Services, but I'm a bit baffled by this. Youtube isn't delivering much and what there is only confuses me more. Also, are there any free key services, as this will just be a deploy and forget app, wouldn't want it to be crippled by an expired subscription (although some of what I read was saying it $0.02 dollars for 10,000 queries or something?)
So - what's the best way and any how-to links would be appreciated.