1

Please see the discussion here. https://forum.cardano.org/t/cardano-cli-signing-a-transaction-without-directly-accessing-the-skey-file-in-plain-text/103742/11

cardano-cli should be able to read signing keys from a named pipe to maintain a high level of security while handling keys, a bug report was submitted but no further interactions. https://github.com/input-output-hk/cardano-node/issues/4101

Thoughts? Alternative approaches? Maybe we can flag someone from IOG who can help clarify if this has been discussed and is a design choice or is it really a "bug".

1
  • If you want to formalise this for deeper consideration and discussion then a Cardano Improvement Proposal (CIP) could be raised at cips.cardano.org Aug 4, 2022 at 2:47

1 Answer 1

0

I can also add this here: https://github.com/input-output-hk/cardano-node/issues/4235

the process substitution is working for some parameters, for some not.

1
  • Good catch too! These little details really help maintain a high level of security when dealing with keys. Aug 8, 2022 at 16:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.