I agree -- in a real-world situation, passwords should be stored with
salt and a hash, and SSL should be used to overcome other shortcomings
of the basic HTTP auth system.  But I wanted to keep my sample code
short and simple.  You can implement a properly secure password
storage system with your own customizer verifier function.


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"web.py" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/webpy?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to