|
|
Posted by Gordon Burditt on 01/10/07 03:44
>Now, as far as the technical matters ...
>
>The scheme you've presented goes against known best practices.
Known best practices include:
Don't store the passwords in plain text or reversible encryption.
Don't transmit passwords in the clear over the network.
Unfortunately, with many protocols, you can't have both.
Challenge-response protocols may require that you have the actual
password, not a hash of it, on both sides to perform the
challenge-response.
Gordon L. Burditt
Navigation:
[Reply to this message]
|