Anyway this not solve Uri problem. Man in black ask about access to the
user private data. Problem with auth by hash? It is not a problem. Reset
password generates new hash.
Let's imagine:
Bad guy hack into system and has all data. passwords hash other tricks
hosting at the server side is not a problem. This guy has time to sort out
all parts. One good way is use public and private keys private is stored at
user PC only. Retrieving crypted data to user PC and uncrypt at client side
is a way to solve this problem.
If some market is for this task it is possible to start, but not for free.
Software part requires 6-8k$. But you should check some rules with lawyer.
16 серп. 2015 16:16 "Uri Even-Chen" <u...@speedy.net> пише:

>
> On Sun, Aug 16, 2015 at 11:18 AM, Avraham Serour <tovm...@gmail.com>
> wrote:
>
>> no, passwords shouldn't be encrypted, you should store hashes, just use
>> the django default auth app
>>
>> Yes, I meant storing the hash in the database and not the password.
>
> Uri.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Django users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-users+unsubscr...@googlegroups.com.
> To post to this group, send email to django-users@googlegroups.com.
> Visit this group at http://groups.google.com/group/django-users.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-users/CAMQ2MsEn4ZeUjNVoXOX0AEe67_q_SLH-bz57_nrPS%3DwgFhz2Pg%40mail.gmail.com
> <https://groups.google.com/d/msgid/django-users/CAMQ2MsEn4ZeUjNVoXOX0AEe67_q_SLH-bz57_nrPS%3DwgFhz2Pg%40mail.gmail.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CADTRxJMjTNkPv8NRCLV6uqtvz7RX2gV2L190UzP6tNUX2RNMew%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to