https://bugzilla.wikimedia.org/show_bug.cgi?id=28419
Bug #: 28419
Summary: Deprecate MD5
Product: MediaWiki
Version: 1.18-svn
Platform: All
OS/Version: All
Status: NEW
Severity: minor
Priority: Normal
Component: User login
AssignedTo: [email protected]
ReportedBy: [email protected]
Classification: Unclassified
MediaWiki uses MD5 for encrypting user passwords, however that encryption
method isn't secure any longer (see for example the lead section of
http://en.wikipedia.org/wiki/MD5, including references). Though it might not be
the most urgent problem so far (thus marked as minor), I believe that MediaWiki
should switch someday to a more secure encryption method, at the moment SHA-2
seems to be the recommendation.
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
