#private-keys

Secrets

Private keys (.pem) on a web server: how it happens

A private key file sitting at a public URL is about as bad as exposures get. It almost never happens on purpose — here is the chain of small steps that leads there, and the fix.