yes, you never ever store a password directly in the db!!!

also good idea to use "salt" so a dictionary attack wont work.

String salt=generate random string of some length;
String tmp=password+salt;
String hash=hash(tmp);

store in the database salt and hash.

-Igor


On 10/14/06, Johan Compagner < [EMAIL PROTECTED]> wrote:
use a one way encryption (hash) like SHA


On 10/14/06, Ayodeji Aladejebi <[EMAIL PROTECTED] > wrote:
so how should passwords be stored into a database especially when yu are using JPA ( a User object) for instance with username prop and password prop?



Please do not use the crypt factory for storing
application password in your database or whereever as the interface
asks for encryption _and_ decryption (synchronous algorithms)

Juergen

On 10/13/06, Igor Vaynberg < [EMAIL PROTECTED]> wrote:
> i believe we first encode using the crypto algorithm given a key you
> specify, and then base64 the result so it can be put into the url
>
>
> -Igor
>
>
> On 10/13/06, craigdd <[EMAIL PROTECTED]> wrote:
> >
> > It is great that wicket provides this functionality out of the box...props
> to
> > the wicket development team.
> >
> > So am I correct in seeing that the
> CryptedUrlWebRequestCodingStrategy is
> > using base64 to encode and decode the URL string?
> >
> > So getting back to the ICryptFactory interface, is this just a convenient
> > way to provide a utility to the application has a whole for encrypting
> > things?
> >
> >
> >
> > Johan Compagner wrote:
> > >
> > > no use CryptedUrlWebRequestCodingStrategy for that.
> > >
> > > johan
> > >
> > >
> > > On 10/13/06, craigdd <[EMAIL PROTECTED]> wrote:
> > >>
> > >>
> > >> So are you saying that by implementing the ICryptFactory interface that
> > >> URLs
> > >> will also be encrypted?
> > >>
> > >>
> > >>
> > >> igor.vaynberg wrote:
> > >> >
> > >> > it is used to retrieve crypto algorithms whenever we need to encrypt
> > >> > something - which isnt very often. wicket has support for encrypting
> > >> urls
> > >> > so
> > >> > that is one place where it is used.
> > >> >
> > >> > generally you can find all places in code where it is used by asking
> > >> your
> > >> > IDE to find references to it.
> > >> >
> > >> >
> > >> > -Igor
> > >> >
> > >> >
> > >> > On 10/13/06, craigdd < [EMAIL PROTECTED]> wrote:
> > >> >>
> > >> >>
> > >> >> In looking at the JavaDoc I noticed the ICryptFactory interface that
> > >> can
> > >> >> be
> > >> >> implemented and added to the security settings of a wicket
> application
> > >> >> object.
> > >> >>
> > >> >> I'm a little confuses as to what this is used for, does anyone have
> > >> any
> > >> >> infor on this interface or how they are utilizing it?
> > >> >> --
> > >> >> View this message in context:
> > >> >>
> http://www.nabble.com/ICryptFactory-Uses-tf2438588.html#a6800168
> > >> >> Sent from the Wicket - User mailing list archive at Nabble.com.
> > >> >>
> > >> >>
> > >> >>
> > >>
> -------------------------------------------------------------------------
> > >> >> Using Tomcat but need to do more? Need to support web services,
> > >> security?
> > >> >> Get stuff done quickly with pre-integrated technology to make your
> job
> > >> >> easier
> > >> >> Download IBM WebSphere Application Server v.1.0.1 based on Apache
> > >> >> Geronimo
> > >> >>
> > >>
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> > >> >> _______________________________________________
> > >> >> Wicket-user mailing list
> > >> >> [email protected]
> > >> >>
> https://lists.sourceforge.net/lists/listinfo/wicket-user
> > >> >>
> > >> >
> > >> >
> > >>
> -------------------------------------------------------------------------
> > >> > Using Tomcat but need to do more? Need to support web services,
> > >> security?
> > >> > Get stuff done quickly with pre-integrated technology to make your
> job
> > >> > easier
> > >> > Download IBM WebSphere Application Server v.1.0.1 based on Apache
> > >> Geronimo
> > >> >
> > >>
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> > >> > _______________________________________________
> > >> > Wicket-user mailing list
> > >> > [email protected]
> > >> >
> https://lists.sourceforge.net/lists/listinfo/wicket-user
> > >> >
> > >> >
> > >>
> > >> --
> > >> View this message in context:
> > >>
> http://www.nabble.com/ICryptFactory-Uses-tf2438588.html#a6800792
> > >> Sent from the Wicket - User mailing list archive at Nabble.com.
> > >>
> > >>
> > >>
> -------------------------------------------------------------------------
> > >> Using Tomcat but need to do more? Need to support web services,
> security?
> > >> Get stuff done quickly with pre-integrated technology to make your job
> > >> easier
> > >> Download IBM WebSphere Application Server v.1.0.1 based on Apache
> > >> Geronimo
> > >>
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> > >> _______________________________________________
> > >> Wicket-user mailing list
> > >> [email protected]
> > >>
> https://lists.sourceforge.net/lists/listinfo/wicket-user
> > >>
> > >
> > >
> -------------------------------------------------------------------------
> > > Using Tomcat but need to do more? Need to support web services,
> security?
> > > Get stuff done quickly with pre-integrated technology to make your job
> > > easier
> > > Download IBM WebSphere Application Server v.1.0.1 based on Apache
> Geronimo
> > >
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> > > _______________________________________________
> > > Wicket-user mailing list
> > > [email protected]
> > >
> https://lists.sourceforge.net/lists/listinfo/wicket-user
> > >
> > >
> >
> > --
> > View this message in context:
> http://www.nabble.com/ICryptFactory-Uses-tf2438588.html#a6801708
> > Sent from the Wicket - User mailing list archive at Nabble.com.
> >
> >
> >
> -------------------------------------------------------------------------
> > Using Tomcat but need to do more? Need to support web services, security?
> > Get stuff done quickly with pre-integrated technology to make your job
> easier
> > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> >
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> > _______________________________________________
> > Wicket-user mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/wicket-user
> >
>
>
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job
> easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>
> _______________________________________________
> Wicket-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/wicket-user
>
>
>

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Wicket-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/wicket-user



--
Aladejebi Ayodeji A.,

DabarObjects Solutions
Email: [EMAIL PROTECTED]
Mobile: +234 803 589 1780
Web: www.dabarobjects.com
Blog: blog.dabarobjects.com

Community:
www.cowblock.net
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
Wicket-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/wicket-user




-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
Wicket-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/wicket-user



-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Wicket-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/wicket-user

Reply via email to