Post #2553673
2025-11-11 18:19 UTC
@sunfish@hachyderm.io @josh@social.joshtriplett.org @esoterra@hachyderm.io Yeah, I'm not disagreeing with the overall thing here, but if you want a non-deterministic seed for an insecure prng you can just use your secure prng. Thus, having a single interface for secure random data is sufficient to cover both use-cases.
Replies (1)
-
@sunfish@hachyderm.io 2025-11-11 19:11
@dotstdy@mastodon.social @josh@social.joshtriplett.org @esoterra@hachyderm.io The twist there is, if you use secure APIs to get the seed, then deterministic environments will see the import of a secure API, and might not be able to run the code, because they don't know that it's ok to make it deterministic.