Best practice and postman/curl

When using the Postman extension in vsCode I was wondering where all the Collections credentials and tokens are stored. Are they secure and what is best practice for its use? Should I switch to curl? And can I use environment variables like curl? The postman documentation just talks about using the postman vault but doesn't say where they are stored and how securely if you aren't using it. submitted by /u/ElectricYFronts [link] [留言]