Recently I found that Netscape used quite simple algorithm to generate random number for Message Authentication Code to establish an HTTPS connection (Nestscpe used time, process identification number, and parent-process identification number). So now I wonder what source of seed do modern browsers use to guarantee true randomness?

  • 4
    In software, there is no such thing as a "true randomness".
    – quant_dev
    Commented Sep 19, 2011 at 6:17
  • I see true randomness all the time when I do code review ;) Commented Sep 19, 2011 at 15:00

1 Answer 1


This question and this question over on security.SE have some answers describing sources and the randomness available.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.