Re: [Python-ideas] PEP 506: some thoughts on the output length of token_bytes (and why I think it should be split in half)

2018-03-12 Thread Nick Coghlan
On 11 March 2018 at 01:35, Tom Tervoort wrote: > 32 > 16, so what's the problem? > --- > > First of all, I'd like to point out that the three examples in the docs > (https://docs.python.org/3.6/library/secrets.html#generating-tokens) > explicitly generate 16-byte token

Re: [Python-ideas] PEP 506: some thoughts on the output length of token_bytes (and why I think it should be split in half)

2018-03-12 Thread Antoine Pitrou
On Sat, 10 Mar 2018 16:35:47 +0100 Tom Tervoort wrote: > > I think there a quite some situations where unnecessarily long codes can > cause usability problems: when using a system > where users have to manually type in a random code (I frequently have to do > that when using the password manager

Re: [Python-ideas] PEP 506: some thoughts on the output length of token_bytes (and why I think it should be split in half)

2018-03-12 Thread Chris Angelico
On Tue, Mar 13, 2018 at 12:45 AM, Nick Coghlan wrote: > As it is though, I think you've made the case for a docs change to make it > explicit that 16 bytes of entropy is almost certainly going to be fine for > practical purposes (which will benefit all users of 3.6+), but not for a > reduction in

Re: [Python-ideas] PEP 506: some thoughts on the output length of token_bytes (and why I think it should be split in half)

2018-03-12 Thread Chris Angelico
On Tue, Mar 13, 2018 at 1:04 AM, Antoine Pitrou wrote: > (I'm not sure what "smaller QR code" means. Given a QR code is > basically a computer analysis-friendly glyph that you show your phone > or other device to perform pattern recognition on, why does it matter > whether the QR code is "small" o

Re: [Python-ideas] PEP 506: some thoughts on the output length of token_bytes (and why I think it should be split in half)

2018-03-12 Thread Antoine Pitrou
On Tue, 13 Mar 2018 01:10:33 +1100 Chris Angelico wrote: > On Tue, Mar 13, 2018 at 1:04 AM, Antoine Pitrou wrote: > > (I'm not sure what "smaller QR code" means. Given a QR code is > > basically a computer analysis-friendly glyph that you show your phone > > or other device to perform pattern rec

Re: [Python-ideas] PEP 506: some thoughts on the output length of token_bytes (and why I think it should be split in half)

2018-03-12 Thread Chris Angelico
On Tue, Mar 13, 2018 at 2:10 AM, Antoine Pitrou wrote: > On Tue, 13 Mar 2018 01:10:33 +1100 > Chris Angelico wrote: >> On Tue, Mar 13, 2018 at 1:04 AM, Antoine Pitrou wrote: >> > (I'm not sure what "smaller QR code" means. Given a QR code is >> > basically a computer analysis-friendly glyph that

Re: [Python-ideas] PEP 506: some thoughts on the output length of token_bytes (and why I think it should be split in half)

2018-03-12 Thread Antoine Pitrou
On Tue, 13 Mar 2018 05:03:21 +1100 Chris Angelico wrote: > > Using the 'secrets' module to generate URLs like this isn't wrong; > since these URLs have to be unguessable (you shouldn't be able to type > http://metube.example/ac and get someone's secret unlisted video), > their identifiers hav

Re: [Python-ideas] PEP 506: some thoughts on the output length of token_bytes (and why I think it should be split in half)

2018-03-12 Thread Chris Angelico
On Tue, Mar 13, 2018 at 5:32 AM, Antoine Pitrou wrote: > On Tue, 13 Mar 2018 05:03:21 +1100 > Chris Angelico wrote: >> >> Using the 'secrets' module to generate URLs like this isn't wrong; >> since these URLs have to be unguessable (you shouldn't be able to type >> http://metube.example/ac an

[Python-ideas] New PEP proposal -- Pathlib Module Should Contain All File Operations

2018-03-12 Thread George Fischhof
Good day all, as it seemed to be a good idea, I wrote a PEP proposal for pathlib to contain file operations. Here is the draft. What do you think about this? BR, George --- PEP: Title: Pathlib Module Should Contain All File Operations Author: George Fischhof Stat

Re: [Python-ideas] New PEP proposal -- Pathlib Module Should Contain All File Operations

2018-03-12 Thread Paul Moore
On 12 March 2018 at 20:57, George Fischhof wrote: > Good day all, > > as it seemed to be a good idea, I wrote a PEP proposal for pathlib to > contain file operations. > > Here is the draft. What do you think about this? I don't know for certain what I think I feel about the idea - in general, it

Re: [Python-ideas] New PEP proposal -- Pathlib Module Should Contain All File Operations

2018-03-12 Thread George Fischhof
2018-03-12 22:16 GMT+01:00 Paul Moore : > On 12 March 2018 at 20:57, George Fischhof wrote: > > Good day all, > > > > as it seemed to be a good idea, I wrote a PEP proposal for pathlib to > > contain file operations. > > > > Here is the draft. What do you think about this? > > I don't know for ce