you are viewing a single comment's thread
view the rest of the comments
[–] 30 points 2 years ago (4 children)

A temporary one that you're expected to remove as soon as you've created the admin user(s) you need, but yes. It should only be there during initial setup and ideally removed before the server is ever exposed to the internet.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 4 points 2 years ago (2 children)

    Yes because having a user remember to do something is a great line of defense, better than encrypting it from the get go. It should just be encrypted in the file.

  • source
  • parent
  • hideshow 2 child comments