I am a Java developer that is building an app where it needs to call a C# process from within. In my situation, the Java app is calling this C# program https://github.com/nddipiazza/SharepointOnlineCookieFetcher.
This C# program requires a password. It accepts a stdin password (masked using SecureInput) or it can take password as an environment variable.
I am wondering... in this situation... what is more secure and why?
1) Sending the password using the stdin?
or
2) Set the environment variable SPPWD
=thepassword
and call the program?