#31807: Whether support more secure method to generate session id
----------------------------------+--------------------------------------
Reporter: dotuser | Owner: nobody
Type: New feature | Status: closed
Component: contrib.sessions | Version: 2.2
Severity: Normal | Resolution: wontfix
Keywords: | Triage Stage: Unreviewed
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
----------------------------------+--------------------------------------
Changes (by felixxm):
* status: new => closed
* resolution: => wontfix
Comment:
Django 3.0+ uses `secrets`, see #27635. Also in Django 2.2 when
`random.SystemRandom()` is not available we raise a warning: ''"A secure
pseudo-random number generator is not available on your system. Falling
back to Mersenne Twister."''
I'm not sure if I understand your proposal (using `secrets` in Django
2.2?), we didn't accept #27635 for Django 2.2 because it supports Python
3.5. Also Django 2.2. is in extended support and we will not add any new
features to it.
--
Ticket URL: <https://code.djangoproject.com/ticket/31807#comment:1>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/065.d015f5cda1ceb8e9b075e64b10f687da%40djangoproject.com.
