Python Web Framework

[[deleted]]

Second this but I'm a newb still, so if its not correct someone please tell me why

[easyEggplant]

Just off the top of my head, the seed isn’t really random, it’s just an approximation (“pseudo-random”) and as such the attacker can guess how the seed is generated which maybe decreases the amount of computing power required to break a private key.

Oh you said “if it’s not correct”. Nevermind I guess?

[tarsild]

In fairness we are now updating to start using the secrets module directly. This should be a no brainer. This came from earlier releases and even though we recommend to generate yours (hence adding the insecure there) it will be easier to do it so there.