search

rax-maas / dreadnot

deploy without dread
Apache License 2.0
631 stars 61 forks source link

use bcrypt in addition to md5 scheme #33

Closed abh closed 8 years ago

abh commented 12 years ago

For crypting passwords it should support bcrypt in addition to of the crazy md5 scheme. (The big feature of bcrypt is "option to tell how slow it should be").

There's also an npm package.

(I realized this was to be compatible with other htpasswd implementations that uses the md5crypt thing and updated the ticket).

djensen47 commented 10 years ago

Yikes, md5 is not secure for passwords.