Mach-II/Mach-II-Framework — Issue #37: Improve methods to create, store and use password in dashboard
Author: mpwoodward
Created: 2012-03-01 06:16:39+00:00
State: open
Labels: enhancement

(Moved from http://trac.mach-ii.com/machii/ticket/432)

Improve methods to create, store and use password in dashboard. Right now we have people set it via a plain text password which I'll be the first to admit it's plain wrong.

I suggest we use a SHA(salt + password) to reduce the chance of rainbow table attacks. In the dashboard configuration, we people would setup the password like this:

``
` `
` `
` `
` `
``

We should also include a password hashing utility that is publicly available so people can easily create a password hash and salt easily.