I've added 2 major(ish) new features recently.

* salt-based password hashing(with base64 encoding)
* key-encrypting-key(kek) support.

The salt-based psasword feature was written when JIRA was hacked
several years ago; JIRA is based on an old version of OfBiz, so this
change could be considered a bug fix.

kek support is a new feature, however, so generally that wouldn't be
backported.  However, I feel strong enough about the
coolness/usefulness factor for this feature that I feel it really
*does* need to be backported.

So, I guess I'm asking for verification: Which of these features
should really be backported, and to which target branches?

ps: kek support *requires* the new hashing changes.

pps: I've already backported both of these to our internal 902021
branch(which is pre-10.04); so it would be possible for me to even go
back that far.

Reply via email to