django secret key not randomized on installation

zhouwein commented 8 years ago

Currently the django SECRET_KEY is stored in the repo and not randomized upon installation. Having a known secret key value is a security risk. This can be fixed by randomizing the key on installation.

alejandropaz commented 8 years ago

Please set up randomization.

On 16/01/26 11:26 PM, zhouwein wrote:

  Currently the django SECRET_KEY is stored in the repo and not
    randomized upon installation. Having
      a known secret key value is a security risk. This can be
    fixed by randomizing the key on installation.
  —
    Reply to this email directly or view it
      on GitHub.

--

Alejandro I. Paz Assistant Professor of Anthropology University of Toronto Scarborough Graduate Depts of Anthropology and Linguistics University of Toronto http://www.utsc.utoronto.ca/people/aipaz/

kimpham54 commented 8 years ago

see trello.

UTMediaCAT / Voyage

django secret key not randomized on installation #53