Re: [DOCS] MD5 passwords

2010-07-08 Thread Thom Brown
On 8 July 2010 14:05, Thom Brown wrote: > On 8 July 2010 11:46, Andre Majorel wrote: >> The doc says « if you are at all concerned about password >> "sniffing" attacks then md5 is preferred. » but does not say why. >> It would seem that an MD5 hash can be sniffed and replayed just as >> well as a

Re: [DOCS] MD5 passwords

2010-07-08 Thread Thom Brown
On 8 July 2010 11:46, Andre Majorel wrote: > The doc says « if you are at all concerned about password > "sniffing" attacks then md5 is preferred. » but does not say why. > It would seem that an MD5 hash can be sniffed and replayed just as > well as a clear-text password. > > Maybe the doc needs t

[DOCS] MD5 passwords

2010-07-08 Thread Andre Majorel
The doc says « if you are at all concerned about password "sniffing" attacks then md5 is preferred. » but does not say why. It would seem that an MD5 hash can be sniffed and replayed just as well as a clear-text password. Maybe the doc needs to explain why "md5" is more secure than "password". Or,