From: Matthew Wild <mwild1@gmail.com>
Date: Sun, 7 Dec 2008 03:12:22 +0000 (+0000)
Subject: Slightly more secure dialback secret generation
X-Git-Url: https://git.enpas.org/?a=commitdiff_plain;ds=sidebyside;h=f52eddd9b1c3b5459fdb80fa7f8d15f263dd9449;p=prosody.git

Slightly more secure dialback secret generation
---

diff --git a/core/s2smanager.lua b/core/s2smanager.lua
index ae834a9c..7827381d 100644
--- a/core/s2smanager.lua
+++ b/core/s2smanager.lua
@@ -43,7 +43,7 @@ local log = logger_init("s2smanager");
 
 local sha256_hash = require "util.hashes".sha256;
 
-local dialback_secret = "This is very secret!!! Ha!";
+local dialback_secret = sha256_hash(tostring{} .. math.random() .. socket.gettime(), true);
 
 local dns = require "net.dns";