On Wed, 07 Jan 2009 21:06:07 -0000, Oltmans <rolf.oltm...@gmail.com> wrote:

But the thing is that I will ask the user for user name and password
only once i.e. when they start the application for the first time.
After that, I'm not supposed to ask the user name and password again.
So in this scenario, if I store a hash on the disk I cannot retrieve
plain-text string back from my hash as I've to send user name and
password to the server in plain-text.

The words "massive security hole" spring to mind.  Does your server
really require you to reauthenticate so often?  Can't you invoke
some kind of secured protocol instead?

--
Rhodri James *-* Wildebeeste Herder to the Masses
--
http://mail.python.org/mailman/listinfo/python-list

Reply via email to