|
Posted by Willem Bogaerts on 10/01/07 10:50
> In the example cited above, however, the password is stored unhashed
> back at the server (i.e., in the database) and it's this problem
> that's been tying me in knots this evening.
Ok, I see. Hashing is not everything. If you are afraid of storing
password in plaintext you can encrypt them. How you store things in a
database has little to do with the authentication process itself.
Best regards,
--
Willem Bogaerts
Application smith
Kratz B.V.
http://www.kratz.nl/
[Back to original message]
|