README.md in fernet-0.1 vs README.md in fernet-1.0

- old
+ new

@@ -53,19 +53,27 @@ Otherwise, `verified` will be false, and you should deny the request with an HTTP 401, for example. The specs -([spec/fernet_spec.rb](https://github.com/hgimenez/fernet/blob/master/spec/fernet_spec.rb)) +([spec/fernet_spec.rb](https://github.com/hgmnz/fernet/blob/master/spec/fernet_spec.rb)) have more usage examples. +### Generating a secret + +Generating appropriate secrets is beyond the scope of `Fernet`, but you should +generate it using `/dev/random` in a *nix. To generate a base64-encoded 256 bit +(32 byte) random sequence, try: + + dd if=/dev/urandom bs=32 count=1 2>/dev/null | openssl base64 + ### Attribution This library was largely made possible by [Mr. Tom Maher](http://twitter.com/#tmaher), who clearly articulated the mechanics behind this process, and further found ways to make it -[more](https://github.com/hgimenez/fernet/commit/2bf0b4a66b49ef3fc92ef50708a2c8b401950fc2) -[secure](https://github.com/hgimenez/fernet/commit/051161d0afb0b41480734d84bc824bdbc7f9c563). +[more](https://github.com/hgmnz/fernet/commit/2bf0b4a66b49ef3fc92ef50708a2c8b401950fc2) +[secure](https://github.com/hgmnz/fernet/commit/051161d0afb0b41480734d84bc824bdbc7f9c563). ## License Fernet is copyright (c) Harold Giménez and is released under the terms of the MIT License found in the LICENSE file.