◐ Shell
clean mode source ↗

Message 163193 - Python tracker

> I'm well aware of the fact that they have different timings. That's
> why I argued against including a unicode aware variant of the timing
> safe compare function.

I would not want to repeat myself, but the compare function can be made
safe if it restricts itself to a given kind of unicode string (say,
all-ASCII).