How much proprietary information could I be giving away

Ask the Experts and Postman Tips
1

If I create, say, a collection in my free-tier team, that goes in to a public workspace, yes?

I know that I shouldn’t put API creds and the like in the collection itself, but rather I should use Environment Variables because they aren’t shared.

But what is being given away by a public workspace?

Say, for example, we were using Postman to test internal APIs. How much information could someone gain from examining the workspace? And, is there a registry of these public workspaces somewhere that allows people to just browse to see what they can find?

2

Hey @sejhemming , welcome to the community forum!

No, you need to explicitly set a workspace as public in your workspaces settings.
See: Collaborate with the Postman community using public workspaces | Postman Learning Center

3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.