niv / websocket.nim

websockets for nim
http://niv.github.io/websocket.nim/docs/0.1.1/websocket.html
Other
101 stars 25 forks source link

Clarification #41

Closed bitnom closed 4 years ago

bitnom commented 6 years ago

What is "A robust RNG for the client data masking?"

bitnom commented 5 years ago

Found this http://www.ietf.org/mail-archive/web/hybi/current/msg05292.html and this http://www.ietf.org/mail-archive/web/hybi/current/msg06173.html . So RNG? What's wrong with Module random?

metagn commented 5 years ago

Sorry for no response, I didn't know this issue existed.

The random module states

Do not use this module for cryptographic purposes!

Even if masking is useless it's useful to provide the user with an option to mask their data. I suppose this doesn't imply the binary size should be huge though. I'll look into not needing the random module and letting the user encrypt for theirselves.

metagn commented 4 years ago

Closing because you can use your own masking key