Thread: RE: Re[2]: HTTP authentication

RE: Re[2]: HTTP authentication

From
"Christian Marschalek"
Date:
> From: Jason k Larson [mailto:jlarson@harrison.org]
>
> I have written a library to handle this.  It is fairly secure
> not allowing the password to be seen except as an MD5 digest.
>  The only requirement is being able to deal with the MD5
> digest.  For instance I have a PgSQL Table with fields User
> ID, Username, Password, and Status.  I give each User and
> unique ID and the Password field contains and MD5 digest of
> the password and I use status (boolean) to tell me if the
> user is active or not.

What exactly is a MD5 diggest? :o)


---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
    (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)




Re[4]: HTTP authentication

From
Jason k Larson
Date:
Password: "MySecretPassword"
MD5 of Password: 7315A012ECAD1059A3634F8BE1347846

It's a way of obfuscating the password.

http://www.php.net/manual/en/function.md5.php

Jason k Larson
Web Developer++


CM> What exactly is a MD5 diggest? :o)



---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
    (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)




RE: Re[2]: HTTP authentication

From
Jesus Aneiros
Date:
Hi,

On Fri, 27 Apr 2001, Christian Marschalek wrote:

> What exactly is a MD5 diggest? :o)

It is a hash function. It will take a text and will generate 128 bit
number unique for that text. Then if you change one simple bit the MD5
will generate another hash for that text and you could deduce thatt the
text was altered.

Saludos, jesus.


Re: HTTP authentication

From
Jason k Larson
Date:
Password: "MySecretPassword"
MD5 of Password: 7315A012ECAD1059A3634F8BE1347846

It's a way of obfuscating the password.

http://www.php.net/manual/en/function.md5.php

Jason k Larson
Web Developer++


CM> What exactly is a MD5 diggest? :o)



---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
    (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)