-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I second this - use /bcrypt/ /bcrypt/ /bcrypt/. py-bcrypt is a great
python package for it.

Daniel Holth <[email protected]> writes:

> You should consider using a secure password hash in your users table.
> Right now if two users in your template choose the same password they
> will get the same hashed password.
>
> --
> You received this message because you are subscribed to the Google
> Groups "pylons-discuss" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected].
> For more options, visit this group at http://groups.google.com/group/
> pylons-discuss?hl=en.
>

- -- 
Parnell "ixmatus" Springmeyer (http://ixmat.us)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJNtZQ8AAoJEPvtlbpI1POLt7QIAJNukkxdtB8jH1gGulFnBIJE
iGDqMAu6GLHAdFEbgNQLxZtPZJCVuQQS0FyubqEcTfOZpecI7hy8XA/MzmncG8iQ
U5YYHhulxG/ByAr6/ifbUHj+UqEY+0oD/Cu1sBcWTIiSOvLhoSfll1XARbx2WLYM
iKqDUrtOrj99T21M7NHfMSuqlr0Xybxkf20LUC2q7kQi5oMLWavQh1eX/RmhQvjg
7K9LWRCCFKWcip3o0bWPq8tPRs1WGj/St4PrOBRYu6TWw0impQjRa8q/yj8DK+Hi
ZtQoyvKUv3O6duBOq69xNjH6xDOereYu1+Gx62ujPs5h/74VuHCul3wQycoJL7Q=
=WnFz
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups 
"pylons-discuss" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/pylons-discuss?hl=en.

Reply via email to