0 reputation · 28 Nov 2022, 18:40 UTC
Configuration must be available to the application without exposing credentials in source control, logs or browser code. What belongs in the runtime and which access controls matter?
Selected answer · editorial discussion
26525 reputation · 01 Dec 2022, 18:40 UTC
Redact sensitive headers, payloads and attributes before exporting telemetry. Keep exporter credentials in protected runtime configuration and use encrypted connections. Sampling limits volume but is not a reliable privacy control, since a sampled request can still contain a secret.
Use comments to ask for clarification. Post a solution as an answer.
No question comments on this page.
opentelemetry