It looks to me like the tapestry5-acegi module hard-codes the password salt
source to be SystemWideSaltSource. I can change the system-wide salt via
acegi.password.salt, but there is no corresponding acegi.salt.source property.
Having a system-wide salt is better than having no salt, but it isn't as strong
as having a different salt for each user. Is there a way I can put in a
request for supporting a new acegi.salt.source config property? I didn't see a
mailing list or issue tracker on the tapestry5-acegi site
(http://www.localhost.nu/java/tapestry5-acegi/). Is here an okay place to
discuss this?
