Gerald Richter wrote:
How hard would it be to change the code to use a SHA or SSHA hash instead? (Admittedly, I'm picking a more cryptographically secure hash at psuedo-random; there may be one that's more appropriate.) Note that I realize they take longer to generate, but that time only happens at login, not per page view, and it should reduce the hash collision rate dramatically.



It is very simple to change the code. Apache::Session is very modular, so
you can specify whihg Generator to use. Go to the Apache::Session source and
take a look at

Session/Generator/MD5.pm

Create a new similar module with your desired alogrithem and specify it as
Generatior in the Embperl config


Hi!

How would you change the Embperl config accordingly.

Kind Regards,
Stefan Cars


--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to