> "Entropy provider" is not a thing And yet you rely on one daily. Random oracles will likely be big business one day. I'm happy CF has put forward their post

> "Entropy provider" is not a thing And yet you rely on one daily. Random oracles will likely be big business one day. I'm happy CF has put forward their posture on this. It's a good thing for the internets. > nor is "good sources and throughput" So you can provide entropy with high quality guarantees at 10GB/s? Sign me up mate. What's your price? > I've been cagey about writing about this but this thread is now old Who the fuck cares? Is this thread about actual discussion of the issue at hand or petty HN posturing? Couldn't care less what influencers and randoms here think. Simply stating thoughts and experiences. > there is a misconception that running cryptography primitives somehow burns through entropy Certainly agree, that's not what I meant though. A broken seed is nearly always exploitable in practice. It doesn't matter in the slightest how strong your primitives are when they are deterministic. > The lava lamps aren't doing anything for Cloudflare's security. They're a marketing gimmick. A very good one! Yeah, of course it's marketing, but with purpose, exposing devs to this stuff is worthwhile, means to an end and all that. XOR'ing sources is as cryptograhpically strong as the best source provided, why not do it if you have much at stake and 20 mins to spare.