Michael,

> No, we don't store the exact cryptographically hashed password you provide
> when creating or updating a user. The value we end up storing does use
> additional salting, as well as other one way transformations to provide a
> very secure result.

Further to this.. do you have any plans to allow customers to supply
hashes in any stronger alternatives to SHA-1? Eg SHA-2, or SHA-3 when
the winner of the the NIST hash function competition is announced?

Mally


>
> - Michael
>
> --
> You received this message because you are subscribed to the Google Groups
> "Google Apps Domain Information and Management APIs" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/google-apps-mgmt-apis/-/Fp0d9GT8isIJ.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected].
> For more options, visit this group at
> http://groups.google.com/group/google-apps-mgmt-apis?hl=en.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google Apps Domain Information and Management APIs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-apps-mgmt-apis?hl=en.

Reply via email to