Cookie Encryption Key

Cantor, Scott cantor.2 at osu.edu
Thu Jul 20 10:15:11 EDT 2017


> Meaning I can leave the Cookie Encryption Key as it is and also won't
> have to bother about cycling it and syncing it between my cluster nodes?

Yeah, there's nothing to sync if it doesn't change and a key that's not being used doesn't hurt anything. You could always turn logging up for one of the relevant classes to make sure it's not doing anything you don't expect it to be doing if you were really concerned about it. Or honestly, just file a RFE for some kind of "loaded but disabled" mode and we can do that. That's a lot easier than constant microsurgery maintenance on Spring wiring to keep things from breaking.

-- Scott



More information about the users mailing list