Hi Kless,
On Jan 31, 7:05 pm, Kless <jonas....@googlemail.com> wrote: > > Your method has a point of failure. Whatever can see your code JS > (client-code), so he will know what are you making with the password > that is sent from a form. > > The best options are https or using HMAC-SHA1/RIPEMD160 > I've indeed referenced HMAC in couple of the previous posts. As this methods should be (almost) irreversable, i don't care if someone will take a look at the JS and figure out what I'm doing (I'm not trying to obtain security by obfustication). As you said, HMAC-SHA1 (or any other strong hash with HMAC) is a good option. I just wonder if Django has builtin support for using this things or I've to write my own. Thanks, Guy --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com To unsubscribe from this group, send email to django-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/django-users?hl=en -~----------~----~----~----~------~----~------~--~---
