in summary: "Unicode Normalization Forms are formally defined normalizations of Unicode strings which make it possible to determine whether any two Unicode strings are equivalent to each other"
as I see this would be highly unsecure for passwords, this is something like converting special characters to latin characters, or forcing lower case only On Wed, Apr 20, 2016 at 4:16 PM, Arun S <[email protected]> wrote: > let me try to clear my question. > > please correct me if am wrong. > basically all I want to know is that there already exists a number of > Unicode normalization forms. > Reference > > Unicode normalization forms: http://unicode.org/reports/tr15/#Norm_Forms > > so as I said as a part of a company norms, the project needs to follow > certain csdl standards and according to that it states that all passwords > shall be normalised according to the ref mentioned and then convert then to > a utf8 which then follows thru the hashing process. > > so since the major part of the project uses djangos frameworks, I believe > that the user authentication methods used already applies the hashing > algorithms. > > but what I could not figure out is that > 1: does django apply any such normalization process for the user passwords. > 2: how is it different between a normalised password and then hashed with > djangos hashing algorithm s and a non normalised password just saved after > hashing. > > > -- > You received this message because you are subscribed to the Google Groups > "Django users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > Visit this group at https://groups.google.com/group/django-users. > To view this discussion on the web visit > https://groups.google.com/d/msgid/django-users/69f70909-215e-4daa-a770-a10b3c2de63a%40googlegroups.com > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Django users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/django-users. To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/CAFWa6tKOJGwT0-wB0kt468KDJcv-CK9norO4LCxDUMooWFknDA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
