Random number for HTTPS MAC

Question

Recently I found that Netscape used quite simple algorithm to generate random number for Message Authentication Code to establish an HTTPS connection (Nestscpe used time, process identification number, and parent-process identification number). So now I wonder what source of seed do modern browsers use to guarantee true randomness?

In software, there is no such thing as a "true randomness". – quant_dev Sep 19 '11 at 06:17 — quant_dev, Sep 19 '11 at 06:17
I see true randomness all the time when I do code review ;) – Terence Johnson Sep 19 '11 at 15:00 — Terence Johnson, Sep 19 '11 at 15:00

score 2 · Answer 1 · edited Mar 17 '17 at 10:46

2

This question and this question over on security.SE have some answers describing sources and the randomness available.

edited Mar 17 '17 at 10:46

Community

1

answered Sep 19 '11 at 10:45

Rory Alsop

326
3
12

Random number for HTTPS MAC

1 Answers1