Skip to content

Commit

Permalink
Merge pull request #346 from DavidKlempfner/patch-5
Browse files Browse the repository at this point in the history
Update automatic_key_management.md
  • Loading branch information
brockallen authored Sep 29, 2023
2 parents ad02930 + b22bd56 commit f60773e
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -86,8 +86,8 @@ that should be encrypted at rest. By default, keys managed by Automatic Key
Management are protected at rest using ASP.NET Core Data Protection. This is
controlled with the *DataProtectKeys* flag, which is on by default. We recommend
leaving this flag on unless you are using a custom *ISigningKeyStore* to store
you keys in a secure location that will ensure keys are encrypted at rest. For
example, if you implement the *ISigningKeyStore* to store you keys in Azure Key
your keys in a secure location that will ensure keys are encrypted at rest. For
example, if you implement the *ISigningKeyStore* to store your keys in Azure Key
Vault, you could safely disabled *DataProtectKeys*, relying on Azure Key Vault
to encrypt your signing keys at rest.

Expand Down

0 comments on commit f60773e

Please sign in to comment.