search

dylang / shortid

Short id generator. Url-friendly. Non-predictable. Cluster-compatible.
https://www.npmjs.org/package/shortid
Other
5.74k stars 258 forks source link

Mention that shortid is not cryptographically secure #124

Closed n-rook closed 6 years ago

n-rook commented 6 years ago

Fixes #116

I like shortid but it's not cryptographically secure: a dedicated attacker could guess an ID. So, I think we should just mention that.

I think the old line about "Non-sequential so they are not predictable." could actually come back, except I would replace "not predictable" with "hard to predict".