why credentials instead of just a random url? about onionshare

[gogodan]

Trying to figure out to delete this issue and open it from another github account, but not sure if there's a way to do that...

[robertsami]

It seems like random URLs just aren't as safe as crypto methods

[garrettr]

It seems like random URLs just aren't as safe as crypto methods

Not sure what you mean by this. If the URL is generated with a proper CSPRNG and is of sufficient length (80-256 bits, depending on your "security level"), then a random URL would work well. Of course, that type of URL might be cumbersome. Here are some examples, base 32 encoded (base 32 is meant to be easy for humans to remember, communicate, and type).

Example 80-bit: aampjlxizpfwqfoy
Example 128-bit: c5xahnpj4syyiwhhcx6b6ysjze
Example 256-bit: wkffvo2burirlaiqsrbrybh5hu4xtn2rstogyx76wkpt2xlcjkrq

[garrettr]

Another nice-looking encoding, designed with human use in mind: http://philzimmermann.com/docs/human-oriented-base-32-encoding.txt

[micahflee]

I think this is a great idea. Working on it now.