logoalt Hacker News

gpderetta • today at 10:24 AM • 1 reply • view on HN

you might have an untrusted sandboxed workload that is not supposed to communicate externally handling secrets, and a different sandboxed workload able to communicate with the external world, not handling secrets.


Replies

gregwebs • today at 11:20 AM

The solution is to not have an untrusted workload handle secrets.