best practices for secret_handle and secret?

[Paul Crowley]

Brad Fitzpatrick wrote:
> Heh, I did that last night too.  I even made it generate secrets too,
> provided you gave it a storage interface.  But then I couldn't solve the
> race condition problems inherent in a caller only providing "get" and
> "set" for a time.  So still debating that interface.

What's the race condition?
-- 
   __
\/ o\ Paul Crowley, paul at ciphergoth.org
/\__/ http://www.ciphergoth.org/