https://bugzilla.wikimedia.org/show_bug.cgi?id=54948

PleaseStand <pleasest...@live.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |pleasest...@live.com
           See Also|                            |https://bugzilla.wikimedia.
                   |                            |org/show_bug.cgi?id=28419

--- Comment #1 from PleaseStand <pleasest...@live.com> ---
To "kill" the setting, we should first retain it only for comparison against
old-style, unprefixed password hashes. (I think change I0a9c9729 tries to do
this.)

Then to deal with existing hashes, we could provide a maintenance script to
convert both old-style and :A: hashes to :B: hashes or a future, work-hardened
successor (bug 28419).

Note that when :A: and :B: hashes were introduced in r35923, an updater was
provided to convert old-style hashes using a single SQL query. It was added in
1.13 and removed in 1.15 because it made the updater dependent on wiki
configuration, and thus did not correctly convert unsalted hashes from within
the web installer (bug 18846). Though in any case it did not add salt where
none existed.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to