Feel free to upload an alternate solution, or tips on how to tweak
mine, if desired. I think the reason I didn't store the password in
the cookie, is that it is not quite as secure that way. Remember that
in BoltWire, you can login with an exact match or an unencrypted match
to an encrypted password. This is because BoltWire has an option for
plain text passwords. So if I access the cookie file, I would have
access to the account even without knowing the unencrypted
password--because I have the exact match equivalent.

With security, I think it is always about trade-offs. Some things are
more secure, but more inconvenient, and vice versa. This is one
example where the small decrease in security might be worth the
increase in convenience.

Cheers,
Dan

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"BoltWire" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/boltwire?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to