in summary: "Unicode Normalization Forms are formally defined normalizations of Unicode strings which make it possible to determine whether any two Unicode strings are equivalent to each other"
as I see this would be highly unsecure for passwords, this is something like converting special characters to latin characters, or forcing lower case only On Wed, Apr 20, 2016 at 4:16 PM, Arun S <arun....@gmail.com> wrote: > let me try to clear my question. > > please correct me if am wrong. > basically all I want to know is that there already exists a number of > Unicode normalization forms. > Reference > > Unicode normalization forms: http://unicode.org/reports/tr15/#Norm_Forms > > so as I said as a part of a company norms, the project needs to follow > certain csdl standards and according to that it states that all passwords > shall be normalised according to the ref mentioned and then convert then to > a utf8 which then follows thru the hashing process. > > so since the major part of the project uses djangos frameworks, I believe > that the user authentication methods used already applies the hashing > algorithms. > > but what I could not figure out is that > 1: does django apply any such normalization process for the user passwords. > 2: how is it different between a normalised password and then hashed with > djangos hashing algorithm s and a non normalised password just saved after > hashing. > > > -- > You received this message because you are subscribed to the Google Groups > "Django users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to django-users+unsubscr...@googlegroups.com. > To post to this group, send email to django-users@googlegroups.com. > Visit this group at https://groups.google.com/group/django-users. > To view this discussion on the web visit > https://groups.google.com/d/msgid/django-users/69f70909-215e-4daa-a770-a10b3c2de63a%40googlegroups.com > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Django users" group. To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscr...@googlegroups.com. To post to this group, send email to django-users@googlegroups.com. Visit this group at https://groups.google.com/group/django-users. To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/CAFWa6tKOJGwT0-wB0kt468KDJcv-CK9norO4LCxDUMooWFknDA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
