On Fri, Sep 16, 2011 at 4:18 AM, Ron Wilson <[email protected]> wrote:
> On Wed, Sep 14, 2011 at 6:40 PM, Stephan Beal Instead of sending the > password in plain text, you hash the password > with a nonce received from the server. Of course, to get the nonce, > you have to attempt to login without supplying credentials. The server > would then respond with a payload containing the nonce to use in the > hash. > The problem with that is that we need the hash routine for every client language :/. -- ----- stephan beal http://wanderinghorse.net/home/stephan/
_______________________________________________ fossil-users mailing list [email protected] http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
