diff -r e312461d3200 -r 7bb677060ebd cubicweb/pyramid/config.py
--- a/cubicweb/pyramid/config.py	Thu Mar 14 16:17:49 2019 +0100
+++ b/cubicweb/pyramid/config.py	Tue Feb 12 17:00:55 2019 +0100
@@ -18,6 +18,8 @@
 """Configuration for CubicWeb instances on top of a Pyramid application"""
 
 from os import path
+import hashlib
+import time
 import random
 import string
 
@@ -32,7 +34,9 @@
 def get_random_secret_key():
     """Return 50-character secret string"""
     chars = string.ascii_letters + string.digits
-    return "".join([random.choice(chars) for i in range(50)])
+    secure_random = random.SystemRandom()
+
+    return "".join([secure_random.choice(chars) for i in range(50)])
 
 
 class CubicWebPyramidConfiguration(BaseWebConfiguration, ServerConfiguration):