News for hackers. Stuff that matters.

A comment on It's Dangerous, a Python cryptographic signing module. Parent comment

Re:It's Dangerous, a Python cryptographic signing module by ch0wn on Sunday June 10, 2012 @08:03AM (#4090826)
It shouldn't be more than changing those two lines:

https://github.com/mitsuhiko/itsdangerous/blob/59f3bf7877e21...

And the tests, of course.

[ Parent | on HN ]
Re:It's Dangerous, a Python cryptographic signing module by Luit on Sunday June 10, 2012 @08:14AM (#4090842)
My point exactly! Armin (the maker/maintainer of the module) will probably consider doing this somewhere in the future.
[ Parent | on HN ]
Re:It's Dangerous, a Python cryptographic signing module by the_mitsuhiko on Sunday June 10, 2012 @10:53AM (#4091189)
I just pushed out a release that makes it possible to override the digest in a subclass easier.
[ Parent | on HN ]
Re:It's Dangerous, a Python cryptographic signing module by zokier on Sunday June 10, 2012 @01:06PM (#4091551)
While overrideability is good, wouldn't it be better to also be 'secure by default'? I'd imagine that SHA-2 would be more sensible default for most users.
[ Parent | on HN ]