Is using a CreateUUID() function as salt a good idea?
问题 I'm using coldfusion and I would like to generate a random salt field for my passwords. I was wondering if a CreateUUID() function is useful here. I found many examples which use a seperate function to create the salt string; but why do this when you could use rand() or CreateUUID() functions instead? I'm not sure. Is it an overkill or a good idea? Or should I use rand() or a timestamp instead? 回答1: This is not a good idea - CreateUUID guarantees uniqueness , not randomness ; if you did a