Yeah, rolling your own can be good. Hashing f.ex. the profile
name and excersing it through the Blowfish or the Reindajl mill
should be adequate. Trying to re-invent the deep bowl isn't
needed here ... IMHO.
> -----Original Message-----
> From: Steve Sabram [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, October 21, 2000 1:53 AM
> To: Palm Developer Forum
> Subject: Re: FAQ fodder: "How do I implement registration for my app"
> (was : Free tool for anyone who can use it)
>
>
> This is the probem with registration schemes, the more common
> of a format you use, the faster it is cracked. Thus rolling your own
> makes it more secure.
>
> Steve
>
> "Schau, Brian" wrote:
>
> > Just an idea - there is nothing wrong in having something as
> > regcode. But instead of sending the hex output of XX chars
> > it might be better to send the hashed value (algorithm to be
> > found ..!)
> >
> > > -----Original Message-----
> > > From: Richard Burmeister [mailto:[EMAIL PROTECTED]]
> > > Sent: Saturday, October 21, 2000 1:47 AM
> > > To: Palm Developer Forum
> > > Subject: Re: FAQ fodder: "How do I implement registration
> for my app"
> > > (was: Free tool for anyone who can use it)
> > >
> > >
> > > From: "Richard M. Hartman" <[EMAIL PROTECTED]>
> > > Subject: Re: FAQ fodder: "How do I implement registration for
> > > my app" (was:
> > > Free tool for anyone who can use it)
> > >
> > >
> > > >
> > > > What's the difference between using regcode and creating
> > > one for yourself
> > > > at that point if neither is supported by the middleman?
> > > (Well, there is
> > > one
> > > > difference: your own can be as secure as you can make it ...)
> > > >
> > > > All I am saying is that there is a complete registration
> > > solution out
> > > there
> > > > that people can use w/o banging their heads against the
> > > wall reinventing
> > > > the wheel -- not that everybody should be using it,
> just that it is
> > > > available.
> > > >
> > >
> > > Richard,
> > >
> > > I was not saying that there is anything wrong with RegCode.
> > > It looks like a
> > > fine system for transmitting user names in an unambiguous
> > > format. The point
> > > of my original post ("Free tool for anyone who can use it")
> > > was that if you
> > > have released software that requires customers to send you
> > > their user name,
> > > as I have, and if you have customers who have difficulty
> > > doing so, as I
> > > have, then you might obtain an immediate benefit from giving
> > > them a copy of
> > > UserName.prc which will help them find out what their user
> > > name actually is.
> > > This seems to me to be easier than rewriting your app to
> > > include RegCode or
> > > forcing them to change their user name to something simple
> > > that they can't
> > > get wrong.
> > >
> > >
> > >
> > > --
> > > For information on using the Palm Developer Forums, or to
> > > unsubscribe, please see
> http://www.palmos.com/dev/tech/support/forums/
> > >
> >
> > --
> > For information on using the Palm Developer Forums, or to
> unsubscribe, please see http://www.palmos.com/dev/tech/support/forums/
>
>
> --
> For information on using the Palm Developer Forums, or to
> unsubscribe, please see http://www.palmos.com/dev/tech/support/forums/
>
--
For information on using the Palm Developer Forums, or to unsubscribe, please see
http://www.palmos.com/dev/tech/support/forums/
