Re: [PATCH] stop using pwgen

ilf Sun, 18 Dec 2016 06:03:07 -0800

Jason A. Donenfeld:

I'll seriously consider replacing pwgen. I didn't know it was so horrible. I'll investigate and make a decision.


Thanks Antoine for writing this patch.
And thanks Jason for considering it.

I fully support moving away from pwgen.

As brought up a month ago, I propose to "generate passwords natively instead of dependency": https://lists.zx2c4.com/pipermail/password-store/2016-November/002468.html


Jason A. Donenfeld:

I like the idea of using /dev/urandom directly, but piping it into base64 is a terrible idea.


I also proposed a method to do this without base64:

ilf:

Here's a simple way to generate passwords from /dev/random directly in shell:
tr -dc "[:graph:]" < /dev/urandom | head -c 32
We could also use "alnum" instead of "graph" and/or "base64" instead of "head".


Thanks, and keep up the good work!

--
ilf

Über 80 Millionen Deutsche benutzen keine Konsole. Klick dich nicht weg!
                -- Eine Initiative des Bundesamtes für Tastaturbenutzung

signature.asc
Description: PGP signature

_______________________________________________
Password-Store mailing list
[email protected]
https://lists.zx2c4.com/mailman/listinfo/password-store

Re: [PATCH] stop using pwgen

Reply via email to