Skip to content

Add note about not accessing cert locally in prod #28

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
crandmck merged 3 commits into from
Aug 23, 2024
Merged

Add note about not accessing cert locally in prod #28

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
3cded9d
Add note about not accessing cert locally in prod
Aug 8, 2024
ca21c3f
Merge branch 'main' into docs/pkey_caveat
crandmck Aug 23, 2024
8f725f2
Update README.md
crandmck Aug 23, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -72,7 +72,9 @@ except Exception as err:

### Add a signed manifest to a media file or stream

Use a `Builder` to add a manifest to an asset.
**WARNING**: This example accesses the private key and security certficate directly from the local file system. This is fine during development, but doing so in production may be insecure. Instead use a Key Management Service (KMS) or a hardware security module (HSM) to access the certificate and key; for example as show in the [C2PA Python Example](https://github.com/contentauth/c2pa-python-example).

Use a `Builder` to add a manifest to an asset:

```py
try:
Expand Down