Menu

#12 encryption

open
None
5
2004-10-21
2002-04-07
Anonymous
No

since many people have their popper running on isp-
servers a safer handling of at least the sensitive
data (passwords!) seems really an issue to me.

Discussion

  • Hermann

    Hermann - 2002-11-07

    Logged In: YES
    user_id=636019

    But if Popper encrypted my POP3 E-Mail Account passwords
    they could not be used!
    Only if popper used a weak encryption that can be decrypted
    by popper. But this would not be usefull, because everybody
    could decrypt it.
    The passwords for the popper-accounts could be encrypted

     
  • BiG OSHi

    BiG OSHi - 2002-11-30

    Logged In: YES
    user_id=617793

    Absolutely right you are!

    Popper is a really nice application but with passwords saved
    as plain text (inside the database) it's rendered unusable
    to me.

    Security, in this case, indeed IS an issue!

     
  • Roy Adams

    Roy Adams - 2004-10-21
    • assigned_to: nobody --> roytoo
     
  • Roy Adams

    Roy Adams - 2004-10-21

    Logged In: YES
    user_id=185109

    hczedik is correct that POP passwords would have to be
    reversibly encrypted, which would be open to attack by
    anyone who knew the algorithm.

    However, popper user-account passwords can and should be
    one-way hashed. I'll look into it, but I'll have to do some
    reading, since I know that attacks against MD5 and SHA-1
    have recently been published.

    Roy

     

Log in to post a comment.

MongoDB Logo MongoDB