#1138: Password hashing methode not documented
-------------------+--------------------------------------------------------
Reporter: Jonny | Owner: damoxc
Type: bug | Status: new
Priority: major | Milestone:
Component: webui | Version: 1.2.0
Keywords: |
-------------------+--------------------------------------------------------
Hey guys, I tried to change the webui password and that's a really
horrible task. You've got to make that easier, or at least outline the
steps!
Here are my points:
1) Your method of using the salt may be valid, but unintuitive. I read
about salts on wikipedia, and they calculate hash(password+salt) whereas
you calculate hash(salt+password). See? You're appending the password, not
the salt. Tell people about that.
2) It's pretty hard to get the daemon/webui to actually reload the config.
You can't just stop and restart, because they'll override your changes to
the config file.
Thanks for being open source. I'd never have found out if it wasn't.
On the other hand, being open source is no excuse for poor documentation.
I suggest you simply add a "Change password" box to the gtk-ui.
--
Ticket URL: <https://dev.deluge-torrent.org/ticket/1138>
Deluge <http://deluge-torrent.org/>
Deluge project
--
You received this message because you are subscribed to the Google Groups
"Deluge Dev" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/deluge-dev?hl=en.
