3 ms·

So don't have a default. Have securerandom() and insecurerandom() and make the programmer choose. That has the advantage of avoiding problems in a generation's

So don't have a default. Have securerandom() and insecurerandom() and make the programmer choose. That has the advantage of avoiding problems in a generation's time: if most platforms moved to random() being secure, it would be excusable if young programmers started assuming that would be the case on older platform too.

benatkin 2y ago
It’s already implied by the presence of secure_random and it isn’t insecure when it’s being used for the appropriate use case.
- IshKebab 2y ago
  It's only implied by secure_random if you know secure_random exists. This is a very very very well known thing. The default MUST be secure.