Skip to content

Provide warning for using Redis to store Data Protection keys #36305

@wadepickett

Description

@wadepickett

Description

Redis is frequently used as a Data Protection key storage provider in ASP.NET Core. However, by default, Redis doesn't persist data across service restarts, which may lead to loss of encryption keys and application failures. There is a need to warn users in documentation about this risk and point them to relevant Redis persistence configuration resources.

Proposal:
Add a clear warning in documentation about using Redis for Data Protection keys and include guidance for enabling Redis persistence.

Page URL

https://learn.microsoft.com/en-us/aspnet/core/security/data-protection/implementation/key-storage-providers?view=aspnetcore-9.0&tabs=visual-studio

Content source URL

https://github.com/dotnet/AspNetCore.Docs/blob/main/aspnetcore/security/data-protection/implementation/key-storage-providers.md

Document ID

7d481dae-d27d-909c-a35d-bad66c7508d2

Platform Id

1884f6f0-a642-2571-072b-c6d319258f62

Article author

@tdykstra

Metadata

  • ID: 59850a13-1322-0c54-9fd3-75ce837c2b1a
  • PlatformId: 1884f6f0-a642-2571-072b-c6d319258f62
  • Service: aspnet-core
  • Sub-service: security

Related Issues


Associated WorkItem - 506466

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions