Re: [GRASS-dev] password security

2022-07-25 Thread Brad ReDacted
On 7/25/2022 9:33 PM, Vaclav Petras wrote: On Mon, 25 Jul 2022 at 23:38, Brad ReDacted wrote: I hate adding dependencies, but security is best left to security experts and I strongly advocate against duplicating security related code. If this security feature is really needed

Re: [GRASS-dev] password security

2022-07-25 Thread Vaclav Petras
On Mon, 25 Jul 2022 at 23:38, Brad ReDacted wrote: > > I hate adding dependencies, but security is best left to security > experts and I strongly advocate against duplicating security related code. > If this security feature is really needed, then the best practices seem to indicate a specialize

[GRASS-dev] password security

2022-07-25 Thread Brad ReDacted
Hello GRASS devs, Is there any objection to adding yet another dependency? Let me explain: I want to resolve the security issue of storing passwords in clear text. I would like to address this by linking OpenSSL and using it's crypto functions to create a hash of the password to be stored and