Hi Everyone, I am looking at Ory Hydra security. I cannot find detailed description about Ory Hydra security, for instance, Ory keys and key management, Ory hydra security model and posture. Do you have more detailed doc for the security? Thanks
For instance, in my understanding the system secret is used for JWK encryption and HMAC signing. For the key rotation, I see we need to do the following
secrets:
cookie:
- the-new-cookie-encryption-key # the new key must be the first entry
- the-old-cookie-encryption-key
system:
- the-new-system-encryption-key # the new key must be the first entry
- the-old-system-encryption-key
What is the system encryption key? Is it system secret? Thanks