NOTE: use Perl; is on undef hiatus. You can read content, but you can't post it. More info will be forthcoming forthcomingly.
All the Perl that's Practical to Extract and Report
Authentication
More |
Login
| Reply
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
I pour myself a cup of strong coffee. :-)
-- Jarkko Hietaniemi
Stories, comments, journals, and other submissions on use Perl; are Copyright 1998-2006, their respective owners.
Missing the point (Score:1)
If you are the only one who has a login currently and the site is on your internal network and you only access it from your internal network, the rest of my post is premature.
However, if you connect to it over the internet, having the password encrypted locally does very little good, as there is *more* danger of passwords being captured as they traverse the Internet.
So long as the rest of the site is secure, local storage of passwords is a fairly moot point. I feel certain that the primary reason that
Re:Missing the point (Score:2)
I absolutely agree that it should only go over https. Right now, it's an insecure password for development only. I wouldn't open this up if I thought it was insecure.
Reply to This
Parent