[wp-trac] [WordPress Trac] #44425: Add WP_CACHE_KEY_SALT to WordPress.org secret-key service

[WordPress Trac]

#44425: Add WP_CACHE_KEY_SALT to WordPress.org secret-key service
---------------------------+------------------------------
 Reporter:  paulschreiber  |       Owner:  (none)
     Type:  enhancement    |      Status:  new
 Priority:  normal         |   Milestone:  Awaiting Review
Component:  General        |     Version:
 Severity:  normal         |  Resolution:
 Keywords:                 |     Focuses:
---------------------------+------------------------------

Comment (by Otto42):

 WordPress code does not contain "WP_CACHE_KEY_SALT" anywhere in it. Is
 this for a plugin or something? Seems like the plugin should generate the
 salt in this case.

 Additionally, the WordPress API isn't generally used to generate these
 anymore, core generates these values itself on installation. The salt API
 still exists as a fallback, but hopefully the random-compat library is now
 considered random enough to not rely on external sources of entropy.

 Also, if we were to modify the API, then we probably would want to add it
 to a 1.2 endpoint, not the existing 1.1 one. Just so we're not sending out
 values that are not actually needed.

 So, unless there's a really good reason behind this that I don't know
 about, I'm guessing this is a wontfix.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44425#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform