[Zope-dev] Salt-weakness in zope.app.authentication passwordmanagers?

[Martijn Faassen]

Shane Hathaway wrote:
[snip]
> Also, every encrypted password should have a scheme name prefix in curly 
> braces, such as "{SSHA}", as discussed earlier in this thread.  That 
> makes it possible to support multiple schemes in a single database, 
> which is essential for migration to new schemes.

+1

Regards,

Martijn