Re: most secure password scheme

2017-04-29 Thread Aki Tuomi
I would go with SHA512-CRYPT, since it is compatible with lots of other things. The field length is static and it contains ascii characters, and it appears to be 118 characters long, but it might be a good idea to use varchar(255) nevertheless, in case you decide to use something else someday.

Re: most secure password scheme

2017-04-29 Thread David Mehler
Hello, Thanks for the explanation. So should I go with SSHA512 or SHA512-CRYPT? From your explanation i'm interpreting to mean that SHA512-CRYPT also salts. This is for storing in a mysql database. Also, what should the password field length and type be set for? Currently it's varchar(128) Thanks

Re: Dovecot last_login plugin and Mysql

2017-04-29 Thread Aki Tuomi
I tried with following config, and it seems to work at least for me: map { pattern = shared/last-login/$user table = users value_field = last_login value_type = uint fields { userid = $user } } last_login and userid are SQL table's field name. Aki > On April 29, 2017 at 4:28 AM

Re: most secure password scheme

2017-04-29 Thread Aki Tuomi
> On April 29, 2017 at 4:22 AM David Mehler wrote: > > > Hello, > > I have a few questions on password schemes. Is SHA512 the most secure? > Is there a difference between SHA512 and SHA512-CRYPT? What about > SSHA512 and SSH512-CRYPT? > > Is there a problem with this sql statement: > > UPDAT