ASF GitHub Bot commented on ARTEMIS-786:

Github user jbertram commented on the issue:

    The whole masking/hashing process still seems like a bit of a jumble to me. 
 To mask a password there's a raw Java command (e.g. "java -cp <classPath> 
<password-to-encode>") and then there's a new command you've added to hash a 
password.  I think it would provide a much better user experience to unify 
both, if possible.

> Store user's password in hash form by default
> ---------------------------------------------
>                 Key: ARTEMIS-786
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-786
>             Project: ActiveMQ Artemis
>          Issue Type: Improvement
>          Components: Broker
>    Affects Versions: 1.4.0
>            Reporter: Howard Gao
>            Assignee: Howard Gao
>             Fix For: 1.5.0
> Artemis use plaintext to store user's password. To enhance security it should 
> be using hash value instead.

This message was sent by Atlassian JIRA

Reply via email to