In sa 3.0+ they are base-64 encodings of the SHA1 hash of the token. The hash is for all practical purposes not reversible.
Does this apply to Bayes/SQL too?
Yup.
mysql> select * from bayes_token limit 1; +----+-------+------------+-----------+------------+ | id | token | spam_count | ham_count | atime | +----+-------+------------+-----------+------------+ | 3 | }C|Gá | 1983 | 15776 | 1111072469 | +----+-------+------------+-----------+------------+
--Rick
