I'm cleaning up uses of rand() and just came across this: https://hg.pidgin.im/pidgin/main/file/30f166f60ee0/libpurple/stun.c#l148 It's been disabled since it was added in 2005. Do we need it? For reference, see "test II" here: https://www.rfc-editor.org/rfc/rfc3489.txt