>Also, I'm wondering if  it'd be prudent to perhaps not keep passwd    
 >as plaintext, and perhaps use a crypt or md5 function on it?   
   
 The problem there is that there exist certain auth mechanisms which 
require the server to know the plaintext of the password.  One-way 
encryption rules out some types of auth.  

Reply via email to