summary refs log tree commit diff
path: root/changelog.d/9984.misc (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Use Python's secrets module instead of random (#9984)Dan Callahan2021-05-141-0/+1
Functionally identical, but more obviously cryptographically secure. ...Explicit is better than implicit? Avoids needing to know that SystemRandom() implies a CSPRNG, and complies with the big scary red box on the documentation for random: > Warning: > The pseudo-random generators of this module should not be used for > security purposes. For security or cryptographic uses, see the > secrets module. https://docs.python.org/3/library/random.html Signed-off-by: Dan Callahan <danc@element.io>