ottoka commented on pull request #753: URL: https://github.com/apache/james-project/pull/753#issuecomment-977871400
The latest push uses a slightly different approach: It includes the hashing mode option in the algorithm name, e.g. `SHA-512/salted`, `SHA-512/legacy`, `SHA-512/plain`. Mode `plain` is the default if not specified, e.g. as in `SHA-512`. Unless the algorithm is read from the database, in which case the option from `<hashingMode>` is used instead (default `plain` again). The benefits of this are: - No extra column needed, so **no database migration** necessary! - No `hashingModeFallback` anymore, as the existing `hashingMode` setting _is_ the fallback. - No configuration changes necessary; James will start upgrading `legacy` mode passwords to `plain` ones by default. - Hopefully easier to introduce advanced hash algorithms like PBKDF2, bcrypt, etc. in the future. - Bonus: Now includes JPA! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
