Is "commons-codec" good enough? That's what we use to encrypt password
in Acegi/Spring Security.

Matt

On Sat, May 17, 2008 at 12:24 PM, Craig L Russell <[EMAIL PROTECTED]> wrote:
> Hi Dave,
>
> The board reports for Feb [1]  and Mar [2] 2008 have lots of examples.
>
> See the mail with subject "[ALL PMC CHAIRS] Export Notification policy" for
> details of what's needed. Basically, if there is any code in Roller that
> either implements encryption or uses encryption features of a third party
> library, then Roller needs to declare itself to use encryption technology.
>
> If it can't be done by Monday, should put into the board report something
> like "Export Notification policy review is underway" and then underway it.
>
> OpenJPA doesn't use encryption technology and reported this in April.
>
> Craig
>
> [1]
> http://www.apache.org/foundation/records/minutes/2008/board_minutes_2008_02_20.txt
> [2]
> http://www.apache.org/foundation/records/minutes/2008/board_minutes_2008_03_19.txt
>
> On May 17, 2008, at 11:11 AM, Dave wrote:
>
>> On Sat, May 17, 2008 at 2:03 PM, Craig L Russell <[EMAIL PROTECTED]>
>> wrote:
>>>
>>> A few months ago, the board asked for an analysis of all PMCs for
>>> encryption
>>> technology used in projects.
>>>
>>> I didn't see the analysis for Roller in the Feb board report and it's not
>>> in
>>> May's report (yet).
>>
>>
>> Hi Craig,
>>
>> Thanks for pointing that out.
>> Can you point to an example analysis, e.g. did OpenJPA do one?
>>
>> - Dave
>>
>>
>>
>>>> Here's what I have so far: http://cwiki.apache.org/confluence/x/1E4B
>
> Craig Russell
> Architect, Sun Java Enterprise System http://java.sun.com/products/jdo
> 408 276-5638 mailto:[EMAIL PROTECTED]
> P.S. A good JDO? O, Gasp!
>
>



-- 
http://raibledesigns.com

Reply via email to