Instead of using the Drupal Private Key as the default key, we should generate a random key on installation and use that. The Drupal Private Key provider should then be flagged as deprecated and should no longer appear in the list of available key providers.

Comments

rlhawk’s picture

rlhawk
Primary language English
Location Seattle, Washington, United States
CreditAttribution: rlhawk commented
Status: Active » Fixed

This was implemented in Encrypt 7.x-2.2.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.