Re: How to deal with password

From: Yiorgos Adamopoulos <adamo_at_dblab.ece.ntua.gr>
Date: 25 Sep 2000 16:16:42 GMT
Message-ID: <slrn8suuja.21tl.adamo_at_city.dbnet.ece.ntua.gr>


In article <BQKz5.29821$Z2.435995_at_nnrp1.uunet.ca>, ASA GSI wrote:
>I am wondering what would be the best technique for storing a user's
>password.

I do not know how Informix deals with this, but a goog technique is to get the (cleartext) password, get the MD5 hash of it, and store the MD5 hash string on the database. Much like the way that the unix login / password works.

--
Yiorgos Adamopoulos         -- #include <std/disclaimer.h>
adamo_at_dblab.ece.ntua.gr     -- Knowledge and Data Base Systems Laboratory, NTUA
Received on Mon Sep 25 2000 - 18:16:42 CEST

Original text of this message