Your secret keeper. Stores secrets in DynamoDB, encrypted at rest.
If you've found a vulnerability or a potential vulnerability in Confidant please let us know at security@lyft.com. We'll send a confirmation email to acknowledge your report, and we'll send an additional email when we've identified the issue positively or negatively.
We have a mailing list for discussion, and a low volume list for announcements:
- https://groups.google.com/forum/#!forum/confidant-users
- https://groups.google.com/forum/#!forum/confidant-announce
We also have an IRC channel on freenode and a Gitter channel:
Feel free to drop into either Gitter or the IRC channel for any reason, even if just to chat. It doesn't matter which one you join, the messages are sync'd between the two.