Implementing Fever: Authentication #157

Closed
opened 2019-03-07 14:30:53 -05:00 by jking · 0 comments
Owner

Fever used an authentication method which would never be employed today. As it requires storing an MD5 hash of the username and password into the database, something which inherently decreases the security of any passwords stored there, a Fever password will have to be created as an explicit step to enabling the protocol for each user.

The Arsse should alternatively support HTTP basic authentication, which is ironically more secure.

Fever used an authentication method which would never be employed today. As it requires storing an MD5 hash of the username and password into the database, something which inherently decreases the security of any passwords stored there, a Fever password will have to be created as an explicit step to enabling the protocol for each user. The Arsse should alternatively support HTTP basic authentication, which is ironically more secure.
jking added this to the 0.8.0 milestone 2019-03-07 14:30:53 -05:00
jking closed this issue 2019-03-20 22:56:33 -04:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Blocks
#156 Implement Fever
MensBeam/Arsse
Reference: MensBeam/Arsse#157
No description provided.