According to ASP.NET Key Management,
Deleting a key is truly destructive behavior, and consequently the data protection system exposes no first-class API for performing this operation.
Is the expired key still being used to unprotect data previously protected by that key even that key is expired?
Are the expired key kept forever even it might not have any more data protected by it?
If the key is short life and it will never be deleted, does the hashed table used in the ASP.NET Core to find the matching key keep growing forever?
I can't find any document or guideline how the expired data protection key should be handled. I would like to know the best practice of handling it.
Thanks in advance.