> We believe we made the session IDs sufficiently hard to guess... Couldn't you say that about most any secret? (I believe my ssh key is sufficiently hard to

> We believe we made the session IDs sufficiently hard to guess... Couldn't you say that about most any secret? (I believe my ssh key is sufficiently hard to guess...)