Bob Ziuchkovski added the comment:

Why not redefine -R to mean "use secure hashing algorithms for built-in types"?

When specified, use hashing algorithms that are secure against 
denial-of-service and other known attacks, at the possible expense of 
performance.  When not specified, use whatever hashing algorithms provide the 
most sensible defaults for every-day use (basically hash the way python 
currently hashes).

Secure hashing would apply not just to strings but to numeric and other types 
as well.  This would break the invariant of `x == y implies hash(x) == hash(y)` 
for numeric types that Mark mentioned.  However, that seems like an 
implementation detail that python users shouldn't rely upon.

----------
nosy: +Bob.Ziuchkovski

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue14621>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to