What is a good practice to follow regarding Sitecore's default configuration for production?

The best practice in regard to Sitecore's default configuration for production is to modify configurations for optimal security. Sitecore's default settings are designed to provide a balance between functionality and convenience during development. However, for production environments, these defaults may not be sufficiently secure.

By modifying configurations, you can harden the security posture of your Sitecore implementation. This includes changing default passwords, configuring access controls, and enabling security features that may be disabled by default. Additionally, it is advisable to audit and adjust settings related to data storage, user permissions, and network security according to the specific requirements of your organization’s security policies.

Trusting the default setup without adjustments can leave vulnerabilities that attackers might exploit. Thus, actively assessing and updating configurations is critical for maintaining a secure and robust Sitecore production environment.