Re: Back to Basics - Re: [PHP] Re: for the security minded web developer - secure way to login?

From: Date: Mon, 16 Feb 2009 13:40:49 +0000
Subject: Re: Back to Basics - Re: [PHP] Re: for the security minded web developer - secure way to login?
References: 1 2 3 4 5 6 7 8 9 10 11 12 13 14  Groups: php.general 
Request: Send a blank email to php-general+get-288323@lists.php.net to get a copy of this message
Rene Veerman wrote:
Just for this case, where authentication of the server isn't an issue, and things like deployment cost are, i'd like to propose that we on this list look again at securing login/pass through onewayHash functions, in an otherwise non-ssl environment. i hate to be a critic of the community here, but isn't this insistence on SSL a bit eh... lazy?
No. It's the right way to do it.

« previous php.general (#288323) next »