Recently I found that Netscape used quite simple algorithm to generate random number for Message Authentication Code to establish an HTTPS connection (Nestscpe used time, process identification number, and parent-process identification number). So now I wonder what source of seed do modern browsers use to guarantee true randomness?

  • 4
    In software, there is no such thing as a "true randomness". – quant_dev Sep 19 '11 at 6:17
  • I see true randomness all the time when I do code review ;) – Terence Johnson Sep 19 '11 at 15:00

This question and this question over on security.SE have some answers describing sources and the randomness available.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.