On 2/7/2014 9:33 AM, Stian Thorgersen wrote:
----- Original Message -----
> From: "Bill Burke" <bburke(a)redhat.com>
> To: keycloak-dev(a)lists.jboss.org
> Sent: Friday, 7 February, 2014 2:04:24 PM
> Subject: Re: [keycloak-dev] Use UUID for IDs
>
> Not sure why I didn't use UUID in the first place. I've used it in
> other code bases. I guess maybe I wasn't sure if UUID.randomUUID()
> guaranteed that the UUID was always unique. Wasn't clear if a time
> component is added to the UUID.
AFAIK there's no time component, but the risk of collision is extremely small
Hopefully no security weeny identifies that as a security risk.
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com