Hello, Paul et al.

On Tuesday, May 5 2009 22:08:15 Paul Johnston wrote:
> Bringing this
> back to TG specifics, how does repoze.who currently save passwords in
> the db?

It's up to the application developer because repoze.who only deals with 
authentication (not user registration or password updates).

By default, TG2 apps store the password hash with an algorithm that uses SHA-1 
and a random salt.

Cheers!
-- 
Gustavo Narea <xri://=Gustavo>.
| Tech blog: =Gustavo/(+blog)/tech  ~  About me: =Gustavo/about |

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"TurboGears Trunk" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/turbogears-trunk?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to