On Jan 9, 2010, at 5:24 PM, D. Richard Hipp wrote:
>
>
> OK.  Beginning with http://www.fossil-scm.org/fossil/ci/cfe33dcf92
> Fossil will store passwords on servers as either cleartext or as a
> SHA1 hash of the password. ...

I have tagged this change "experimental" for now.  I'm planning to  
make some additional (incompatible) changes to make the password  
handling more secure.  You can experiment with this version, but you  
should create backups to restore from after my upcoming incompatible  
changes.....

d...@hwaci.com



_______________________________________________
fossil-users mailing list
fossil-users@lists.fossil-scm.org
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users

Reply via email to