Re: Introducing the secrets module

2016-04-17 Thread Steven D'Aprano
On Sun, 17 Apr 2016 10:40 pm, Irmen de Jong wrote: > On 17-4-2016 4:36, Steven D'Aprano wrote: > >> And the documentation: >> >> https://docs.python.org/3.6/library/secrets.html >> >> >> Comments requested. > > I've read about the "How many bytes should tokens use?" consideration. It > sugges

Re: Introducing the secrets module

2016-04-17 Thread Irmen de Jong
On 17-4-2016 4:36, Steven D'Aprano wrote: > And the documentation: > > https://docs.python.org/3.6/library/secrets.html > > > Comments requested. I've read about the "How many bytes should tokens use?" consideration. It suggests that to be secure, tokens need to have sufficient randomness. Th

Introducing the secrets module

2016-04-16 Thread Steven D'Aprano
I'm pleased to announce a new standard library module for Python 3.6 and better, to aid in generating secure tokens for authentication and other secrets. Last year, the founder of OpenBSD Theo de Raadt contacted Guido van Rossum with concerns that the Python standard library made it too easy for p