#8647: Add support for user password encryption algorithm selection
---------------------------------+------------------------------------------
 Reporter:  sammyrulez           |       Owner:  nobody    
   Status:  new                  |   Milestone:  post-1.0  
Component:  Authentication       |     Version:  SVN       
 Keywords:  password encryption  |       Stage:  Unreviewed
Has_patch:  0                    |  
---------------------------------+------------------------------------------
 User class  in django/contrib/auth/models supports crypt algorithm in
 decoding password but not in the set_password method (see line 175). User
 password encryption algorithm should have a default but also but also
 configurable in project settings.

 Project settings SECRET_KEY should be used in the encryption since all the
 data needed for brute force cracking are available in a db dump

-- 
Ticket URL: <http://code.djangoproject.com/ticket/8647>
Django Code <http://code.djangoproject.com/>
The web framework for perfectionists with deadlines
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to