Environment variables could use more text in the "Security Features" doc

[rsshilli]

Missing Information

How are environment variables stored? Can any CircleCI employee see them in plain text? Or are they stored encrypted with a key for each client, of some kind? Are you relying on S3 / RDS encryption? If so, what cipher are you using?

Already Looked

https://circleci.com/docs/2.0/security/

Potential Locations

I would expect to find a section for Environment variables here: https://circleci.com/docs/2.0/security/
There is a single sentence today.

[smart-alek]

Hey @rsshilli, thanks for the great questions re: env vars in the security doc. I took a brief jaunt through our dedicated Environment Variables document, but sadly, your questions remain unanswered there as well.

I've reached out to our security team to see if we can dig up the details you want. Thanks for your patience!