Hi Everyone, I am looking at Ory Hydra security. I...
# general
m
Hi Everyone, I am looking at Ory Hydra security. I cannot find detailed description about Ory Hydra security, for instance, Ory keys and key management, Ory hydra security model and posture. Do you have more detailed doc for the security? Thanks For instance, in my understanding the system secret is used for JWK encryption and HMAC signing. For the key rotation, I see we need to do the following secrets: cookie: - the-new-cookie-encryption-key # the new key must be the first entry - the-old-cookie-encryption-key system: - the-new-system-encryption-key # the new key must be the first entry - the-old-system-encryption-key What is the system encryption key? Is it system secret? Thanks