InteractiveAdvertisingBureau / SIMID

Secure Interactive Media Interface Definition (SIMID)
https://interactiveadvertisingbureau.github.io/SIMID/
Apache License 2.0
45 stars 24 forks source link

SIMID-308: Update sample to use web.crypto for generating session IDs. #430

Closed nchavez324 closed 2 years ago

nchavez324 commented 2 years ago

This still generates a v4 UUID, as before. I chose crypto.getRandomValues over crypto.randomUUID since it supports much older browsers including IE, and doesn't require a secure context (HTTPS or localhost).

308

I'll update the spec to include notes about using a cryptographically secure method in a separate PR.