Security schemes for Players

[Alejandro Tejada]

Hi Richard,

Sorry for being so late to your message.
I was a whole week without internet.
An ISP connection problem. :-((((((

on Mon, 04 Oct 2004
Richard Gaskin wrote:

> > How could i prepare in case some teacher pass
> > or lost their password?
 
> You may find it even more secure to store no
> passwords at all on your 
> server, only an MD5 digest of them.  

I think about encoding these digest with
a propietary scheme...

> The upside to
> this approach is that 
> it provides stronger protection for your teacher's
> passwords -- most 
> folks use only a few passwords for everything in
> their lives, but even 
> if someone breaks into your server and steals all
> the data there will be 
> no passwords there. :)

Good point!!!

> The downside is that there's no way to send a
> password to a teacher. 
> But increasingly many systems designers aren't
> sending passwords anyway, 
> but merely resetting the password, which you could
> do as well with an 
> MD5-based scheme.

That's the way to go,
Thanks a lot again Richard and Chipp! :-)))

al

=====
Visit my site:
http://www.geocities.com/capellan2000/


		
_______________________________
Do you Yahoo!?
Declare Yourself - Register online to vote today!
http://vote.yahoo.com