synapse/changelog.d
Dan Callahan 498084228b
Use Python's secrets module instead of random (#9984)
Functionally identical, but more obviously cryptographically secure.
...Explicit is better than implicit?

Avoids needing to know that SystemRandom() implies a CSPRNG, and
complies with the big scary red box on the documentation for random:

> Warning:
>   The pseudo-random generators of this module should not be used for
>   security purposes. For security or cryptographic uses, see the
>   secrets module.

https://docs.python.org/3/library/random.html

Signed-off-by: Dan Callahan <danc@element.io>
2021-05-14 10:58:46 +01:00
..
.gitignore Correct attrs package name in requirements (#3492) 2018-07-07 10:46:59 +10:00
9978.feature Support enabling opentracing by user (#9978) 2021-05-14 10:51:08 +01:00
9980.doc Update SSO mapping providers documentation about unique IDs. (#9980) 2021-05-13 14:37:20 -04:00
9984.misc Use Python's secrets module instead of random (#9984) 2021-05-14 10:58:46 +01:00
9988.doc Update minimum supported version in postgres.md (#9988) 2021-05-14 09:21:00 +01:00