4 ms·
> Quoting the Sentry documentation, system.secret-key is “a secret key used for session signing. If this becomes compromised it’s important to regenerate it as
by beefhash 8y ago
> Quoting the Sentry documentation, system.secret-key is “a secret key used for session signing. If this becomes compromised it’s important to regenerate it as otherwise its much easier to hijack user sessions.“; wow, it looks like it’s a sort of Django SECRET-KEY override!
One wonders why that is even there. Was Django's own session code not good enough?
- deleted 8y ago[deleted]
- the_mitsuhiko 8y ago`system.secret-key` is a value from the options system that gets propagated to different parts. It actually just sets the `SECRET_KEY` value in the settings file for all intends and purposes which has different consumers. This abstraction exists because some options can be set from the admin UIO.