-----BEGIN PGP SIGNED MESSAGE-----
On 02/18/2011 04:19 PM, Martijn Pieters wrote:
> I was looking into bcrypt support for PAS I found z3c.bcrypt, which
> implements zope.password compontents (named utilities).
> PAS, however, uses Zope2's AccessControl.AuthEncoding module to handle
> password encryption / hashing schemes. Now, while AuthEncoding
> certainly supports extending the available schemes, it does need
> additional glue-code to be able to reuse zope.password components.
> Moreover, we now have two places to maintain the various hashing and
> encryption schemes.
> We should at the very least convert PAS to use zope.password instead
> of AccessControl.AuthEncoding. With that change it is then at least
> trivial to support bcrypt as well, you simply install the additional
> z3c.bcrypt egg and be done with it. But would it make sense to convert
> Zope2 itself as well? We could make the AuthEncodings module simply a
> proxy (with deprecation warnings if need be) for zope.password
> Any objections to reworking both AuthEncoding and PAS?
- -1 to any deprecation warnings; +0 otherwise.
Tres Seaver +1 540-429-0999 tsea...@palladion.com
Palladion Software "Excellence by Design" http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
-----END PGP SIGNATURE-----
Zope-Dev maillist - Zope-Dev@zope.org
** No cross posts or HTML encoding! **
(Related lists -