wohali opened a new issue #1353: Add cookie support to the replicator, then increase default PBKDF2 iterations URL: https://github.com/apache/couchdb/issues/1353 In a discussion with @rnewson today this point came up. We currently have an absurdly low number for default PBKDF2/bcrypt iterations/rounds (10) because the replicator does not use a session cookie. If we can teach the replicator to use a session cookie, then we can crank up the default value such that `POST /_session` takes ~1000ms. ## Expected Behaviour * The replicator uses session cookies for authentication. * Passwords are encrypted more strongly by default. ## Current Behaviour * The replicator supplies credentials on every request. * Passwords are encrypted with only 10 rounds/iterations by default.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
