[rt-users] question about password encryption

Richard West Richard.West at divatv.com
Wed Aug 23 14:11:12 EDT 2000


It's an easy fix that I have sent in a couple of times a long while back (early
last year, and late the year before), but it never got implemented for some
reason...

-Rich

Jesse wrote:

> Known deficiency in rt 1.0.  That binary file is only readable by root.
> and the passwords are sent in cleartext over http.  it's all quite suboptimal.
> rt2 will be better about this.
>
> On Wed, Aug 23, 2000 at 07:02:16PM +0200, Othmar Pasteka wrote:
> > hi,
> >
> > maybe i missed an important note in the installation/mysql docs
> > but the passwords of the users are stored plain text in my
> > database (yeah, yeah, it's a binary file but try less ;)).
> > pls enlighten me :).
> >
> > thanks
> > Othmar






More information about the rt-users mailing list