[Dailydave] entropicdata.com ?

[Jon Oberheide]

On Tue, 2009-05-19 at 19:44 -0400, Dave Aitel wrote:
> Lots of people are doing things in web services (AJAX, etc) that
> require real crypto. So they implement RSA/twofish/etc in Javascript
> and run that in the browser. But this requires a way to generate a key
> which requires some entropy. There's no "feed of random numbers" that
> I know of on the web that you can use to seed your crypto, probably
> because of cross site restrictions. But it seems like either google
> gears, HTML5, or one of the other new extensions should offer it as a
> built-in API.
> 
> Likewise if they allowed you to get data from other sites (which the
> new Firefox does sometimes?) then you could set up a web service for
> people to use to get their entropic data from (over SSL of course :>).

random.org has had a HTTP interface available for a while but I can't
say I've ever used it:

http://random.org/clients/http/

Regards,
Jon Oberheide

-- 
Jon Oberheide <jon at oberheide.org>
GnuPG Key: 1024D/F47C17FE
Fingerprint: B716 DA66 8173 6EDD 28F6  F184 5842 1C89 F47C 17FE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : http://lists.immunitysec.com/pipermail/dailydave/attachments/20090519/1cd42526/attachment-0001.pgp