Re: [web2py] bare login using a sha1 or md5 signature instead of plain text pass

I have been thinking about the same process, but have decided instead of using a password having a access uuid as the key, and the app can send that to login to the web2py site. You can then have your code create the cookies or whatever is required based on the uuid etc.. On Tue, Feb 14, 2012 at 8

[web2py] bare login using a sha1 or md5 signature instead of plain text pass

I'm doing a C++ framework and i want to remotely login into web2py, for simplification libcurl style. Problem is that the bare login requires plain text or just base64 encoded password transmission, in short it is vulnerable to a man in the middle attack that may compromise the user passwords. So