Posted by C. (http://symcbean.blogspot.com/) on 11/21/07 13:05

On 20 Nov, 16:52, The Natural Philosopher <a...@b.c> wrote:
> Abu Hamza wrote:
> > On Nov 20, 9:12 pm, "Steve" <no....@example.com> wrote:
> >> "Abu Hamza" <ali...@sunnipath.com> wrote in message
>
> >>news:fb263072-44ab-4f43-9832-bb5db055aee0@w28g2000hsf.googlegroups.com...
>
> >>> I have to build a simple login page using CHAP to authenticate users
> >>> in a DB. Can anyone explain how its done in simple steps? example of
> >>> code would be great.
> >> why chap?!
>
> > The company I work for wants this. I don't know why but whats wrong
> > with it?
>
> its pretty damned weird - its normally used in PPP streams only.
>
> I don't think you really want to do this..i'd get clarification.

Maybe he just means a challenge based hash system to avoid sending
passwords in clear text. Or maybe he means CHAP as implemented in PPP,
or maybe he means CHAP as implemented by Microsoft for PPP.

In the case of the former, see
http://groups.google.co.uk/group/comp.lang.php/browse_thread/thread/c5960aa0afac2621/4993d290eb78f811?hl=en&lnk=gst&q=MD5+salt

C.

[Back to original message]