privatekey verifiedcriticalWritten by the Hub
The signing key itself
The PEM-encoded private key, stored in the cluster database in clear text.
In detail
Every node must be able to sign, and the database is what they share — so the key lives here, readable by anything with database access. That has three consequences worth saying plainly: a database backup contains signing keys, –purge-database destroys them irrecoverably, and database credentials are as sensitive as the keys themselves. The console's Generate button produces 1024 bits, which we measured. For anything a customer cares about, a 2048-bit key generated elsewhere should be pasted in instead.
What happens if you get it wrong
A key generated by the console is used for a customer domain.The signature is 1024-bit, which some receivers already treat as weak and more will.verified by experiment · inference