tptacek has responded with specificity, actually detailing how the Solaris team is, in fact, wrong in their guidance. No, tptacek has responded with a view tha

tptacek has responded with specificity, actually detailing how the Solaris team is, in fact, wrong in their guidance. No, tptacek has responded with a view that suggests beliefs about how they are wrong in their guidance, but has done so without 1) access to the actual implementation 2) the decades of experience of implementing and architecting it. tptacek is certainly free to express opinions; but respectfully, I will trust the individuals that have implemented, architected, who are considered experts in their field, and who have maintained it for the last decade or longer over someone who has not. After all - the Linux team, who presumably also consists of pretty smart people, also believed they were right regarding /dev/random versus /dev/urandom, and it turns out it wasn't the case with them either. I pointed out very specifically why my assertions about Solaris are correct. When you configure the system in a specific way, the implementation for urandom vs. random can produce different results. There are also other subtle differences in the implementations. Any further details that can be shared will likely be placed in that blog post I linked to when it is updated for a forthcoming Solaris release.