3 ms·
There certainly is a difference between keeping LavaRand operational or not. But I would submit that the difference is worth it. I mean c'mon, it's super cool
by d-z-m 4y ago
There certainly is a difference between keeping LavaRand operational or not. But I would submit that the difference is worth it. I mean c'mon, it's super cool!
Also, from a different angle, think about the potential blowback if they were to shut it down... That sounds like a PR nightmare waiting to happen.
> making sure that randomness makes its way into every cloudflare server.
This does not hinge on LavaRand. The machines' local entropy sources would ensure secure randomness even if LavaRand were compromised.
- charcircuit 4y ago>think about the potential blowback if they were to shut it down... I honestly don't think it would be bad PR. It will just get the lava lamp story in the news cycle again. >This does not hinge on LavaRand. My point is that there is extra services to maintain that offer 0 technical benefit to you.
- d-z-m 4y ago> I honestly don't think it would be bad PR. It would be terrible PR, and would re-ignite all the old conspiracy theories regarding Cloudflare. > My point is that there is extra services to maintain that offer 0 technical benefit to you. The benefit isn't zero, LavaRand is a hedge against attacks against the local CSPRNG. More details here: https://blog.cloudflare.com/lavarand-in-production-the-nitty-gritty-technical-details/ https://blog.cloudflare.com/lavarand-in-production-the-nitty...