#9687: Use more randomness in secret key generation --------------------------------+------------------------------------------- Reporter: [EMAIL PROTECTED] | Owner: nobody Status: new | Milestone: Component: Core framework | Version: 1.0 Keywords: SECRET_KEY random | Stage: Unreviewed Has_patch: 0 | --------------------------------+------------------------------------------- The generation of the SECRET_KEY setting for a new site uses an artificially low number of characters due to a design accident. As far as I can see, SECRET_KEY is not used in a way which would make it case- sensitive or require it to be read out, but instead is used in MD5 hashes where more randomness is preferred.
The supplied patch not only adds more characters to be selected from but also makes an unreadable one-liner into a readable two-liner. -- Ticket URL: <http://code.djangoproject.com/ticket/9687> Django <http://code.djangoproject.com/> The Web framework for perfectionists with deadlines. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Django updates" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/django-updates?hl=en -~----------~----~----~----~------~----~------~--~---
