4 ms·

Any opinions on the itsdangerous module ? I am using it currently for a side project to generate reset URLs. http://packages.python.org/itsdangerous/ http://pa

• tptacek 14y ago
  If you have to use any cryptography other than "generate random number" to implement password reset, you should be ready to cough up $7-14k for a professional security assessment. I'm not trying to drum up business. I would strongly prefer that you not try to be clever with this feature. Or, you can ignore the audit and just be the subject of a blog post like this sometime in the future.