Re: secret strings

[Stefan Monnier]

> I don't think that's the same thing.  We want to pass the
> producer-generated data around and wipe it when the garbage collection
> deallocates the memory.  But maybe I misunderstand something.

I don't think that's what you want: work done by finalizers should never
be significant (e.g. it's a bad idea to use finalizers to close
file-handles, or to wipe sensitive data).  If you want to wipe that
data, then do it explicitly with `clear-string', since the GC might
never collect it.


        Stefan