Re: Re: Do you trim() usernames and passwords?

From: Date: Tue, 28 Dec 2010 20:43:32 +0000
Subject: Re: Re: Do you trim() usernames and passwords?
References: 1 2 3 4 5 6 7  Groups: php.general 
Request: Send a blank email to php-general+get-310294@lists.php.net to get a copy of this message
Dotan Cohen wrote:
On Tue, Dec 28, 2010 at 22:30, Joshua Kehn <josh.kehn@gmail.com> wrote:
indeed, and on reflection, if you're putting this much effort in to it, and security is a worry, then forget username and passwords, and issue each user with a client side RSA v3 certificate and identify them via the public key of the cert.
I just realize that this would also completely solve your trim() problem!
"Hello, Dotan? Hi, we haven't spoken in a full week now that we don't have the trim problem. But I reinstalled Windows and wiped the drive, now I can't log in. Can you help me?"
that's what pkcs12 was invented for, just issue another certificate / key pair.

« previous php.general (#310294) next »