Re: [keycloak-dev] defaults for user session storage

----- Original Message ----- +1 We should delete the in-mem cache and only keep the Infinispan cache. We could even remove the no cache option and just always use Infinispan. I don't think replication needs to be encrypted by default. We don't send anything sensitive as we're just using an invalidation cache. So no realm keys, etc are transmitted. In either case the database connection is in most cases not encrypted so these things are actually being sent on the local network.