Re: [Omail-admin-devel] ACCESS PASSWORDS
Brought to you by:
swix
From: Philipp S. <ph...@bi...> - 2004-11-17 13:23:36
|
Jefferson Midei wrote: > If oMail-admin can validate and change the users passwords (it means that it > has access to these passwords, right?), can't it show these passwords? As Oliver already explained, they are stored as one-way encrypted hashes. (like md5) So whenever a password has to be validated, it is encrypted using the same algorithm and then compared to the stored encrypted password. That's how all these one-way encryption algorithms work. philipp -- philipp stucki . bitflux GmbH . schoeneggstrasse 5 . CH-8004 zurich ph...@bi... . phone +41 1 240 56 70 . fax +41 1 240 56 71 http://www.bitflux.ch |