On 8-2-2019 16:46, Dimitry Sibiryakov wrote:
08.02.2019 16:44, marius adrian popa wrote:
What type of UUID we use in Firebird ?
I guess Version 1
Look at text presentation. UUID version is fourth digit in second
group IIRC.
The first digit of the third group indicates the version, which is 4.
On Windows Firebird calls CoCreateGuid which generates type 4 (although
technically, the Windows API doesn't guarantee this).
But in any case, I'll also point you to RFC-4122, section 6
(https://tools.ietf.org/html/rfc4122#section-6) which says:
"""
6. Security Considerations
Do not assume that UUIDs are hard to guess; they should not be used
as security capabilities (identifiers whose mere possession grants
access), for example. A predictable random number source will
exacerbate the situation.
Do not assume that it is easy to determine if a UUID has been
slightly transposed in order to redirect a reference to another
object. Humans do not have the ability to easily check the integrity
of a UUID by simply glancing at it.
Distributed applications generating UUIDs at a variety of hosts must
be willing to rely on the random number source at all hosts. If this
is not feasible, the namespace variant should be used.
"""
Mark
--
Mark Rotteveel
Firebird-Devel mailing list, web interface at
https://lists.sourceforge.net/lists/listinfo/firebird-devel
