Make WordPress Core

Opened 6 years ago

Last modified 6 years ago

#44425 new enhancement

Add WP_CACHE_KEY_SALT to secret-key service

Reported by: paulschreiber's profile paulschreiber Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: General Keywords:
Focuses: Cc:


Currently, the secret-key service


It would be helpful if it also generated WP_CACHE_KEY_SALT. That way, people who install the object-cache.php drop-in would be less likely to experience unexpected behaviour.

See also:

Change History (2)

#1 @kraftbj
6 years ago

I cross-posted this to a new Meta ticket at for the API changes.

On the Core side, shall we add WP_CACHE_KEY_SALT to wp-config-sample.php, wp-admin/setup-config.php, wp-admin/maint/repair.php, etc?

#2 @Otto42
6 years ago

WordPress code does not contain "WP_CACHE_KEY_SALT" anywhere in it. Is this for a plugin or something? Seems like the plugin should generate the salt in this case.

Additionally, the API isn't generally used to generate these anymore, core generates these values itself on installation. The salt API still exists as a fallback, but hopefully the random-compat library is now considered random enough to not rely on external sources of entropy.

Also, if we were to modify the API, then we probably would want to add it to a 1.2 endpoint, not the existing 1.1 one. Just so we're not sending out values that are not actually needed.

So, unless there's a really good reason behind this that I don't know about, I'm guessing this is a wontfix.

Last edited 6 years ago by Otto42 (previous) (diff)
Note: See TracTickets for help on using tickets.