Re: Encrypted MySQL passwords
| From: | Richard Fox | Date: | Fri, 27 Sep 2002 12:47:11 +0000 |
| Subject: | Re: Encrypted MySQL passwords | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-117839@lists.php.net to get a copy of this message | ||
"Rodolfo Gonzalez" <rodolfo@equinoxe.g-networks.net> wrote in message
news:Pine.LNX.4.44.0209261617570.27258-100000@main.g-networks.net...
> On Thu, 26 Sep 2002, Brad Bonkoski wrote:
>
> > also might be better then sending it in the clear.
>
> But I guess that the original poster wanted to know how to avoid the clear
> text session originated by the client-server dialog itself, not the
> passwords in a query (its easy to log the sessions using tcpdump, for
> example). BTW (and I have not checked the CVS/TODO, so I ask here), is
> there planned support for SSL & MySQL 4.x.x in PHP?.
>
That's right, I want to avoid the original clear text session from the
start. Thanks for all the info. When I am ready to go online with my app, I
will either recompile my MySQL 3.23.49 to use SSL, or if production MySQL
4.x.x is ready I'll switch to it.