>Indeed, that's one extra level of security I wouldn't mind. Although, the 
>RSP should be incapable of getting access to the password because (in 
>reality) the password shouldn't be STORED in cleartext (which it obviously 
>currently is). It should be stored as the result of some trapdoor encoding 
>routine (MD5, crypt(), etc.).

They could simply encrypt it with the RSP password as the key.


Reply via email to