Can a Kubernetes secret be used without leaving a copy in a memory dump? Measured, not argued: ~3,900 data points across C, Rust, Go and Java, with real dumps and a canary. For file and env delivery: yes. When fetching over HTTPS: only without a standard-library HTTP client.
c java kubernetes rust golang nix reproducible-research hardening memory-forensics security-research secrets-management ktls core-dump memfd-secret
-
Updated
Aug 23, 2026 - Python