On Tue, Jun 03, 2008 at 01:52:06PM -0400, Juan Miscaro wrote:

quoted text
> 2008/6/3 Jason Dixon :

> >

> > Nope, you can store the md5-hashed passwords in MySQL.  Authdaemond

> > reads them fine.

>

> Ah, md5.  Is that still considered 'encryption'?  No, I'm not a troll,

> just wanting to learn.

If you're worried about someone reading md5 passwords out of your

database, you have bigger problems than the strength of your hashing

algorithm.
> What do you think of using cleartext in the backend?  Is that a

quoted text
> terrible mistake?

Yes, in so much as losing email passwords for virtual accounts is a

terrible mistake.  There are worse things to lose sleep over.
--

Jason Dixon

DixonGroup Consulting

http://www.dixongroup.net/