curl-library
Re: better random from TLS/crypto backends!
Date: Wed, 30 Jul 2014 21:42:47 +0200
On Wed, Jul 30, 2014 at 12:12:12AM +0200, Daniel Stenberg wrote:
> This action is made to highlight the need for attention and to stress
> that we really can use good random, even for a few non-TLS features
> and while we have a more stupid default implemenation for when
> there's really no TLS backend that can provide one for us, we need to
> actively make that choice.
This patch also breaks the case where TLS is disabled an no TLS library
is even available. That's definitely a case where we should fall back to
an alternative PRNG.
>>> Dan
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-07-30