[thelist] hashing stored passwords (revisited)

ted serbinski tss24 at cornell.edu
Wed Jun 25 20:40:04 CDT 2003


> simple.  just generate a new, random password, hash it, and stuff
> it in the
> database.  take this newly created password and email it to the email
> account on record.  give them a lookup by both username and email address.
> make sure to constrain accounts so there are no duplicates of either.


Ah, guess this was too simple to think of. Generate a new one, doh! Seems
this would be the easiest method of all. Thanks.

ted




More information about the thelist mailing list