On 15/07/2021 18:27, Joakim Erdfelt wrote:
The `MD5:` format Credential / Password is what's known as a 1-way hash
(this is not encryption)
You can take a password and generate a MD5.
Then later, when a password is provided, you can run the hash again and
compare the resulting MD5 to know if the password that was provided is a
match.
Ouch. MD5? Not terribly secure. I prefer BCrypt.
--
John English
_______________________________________________
jetty-users mailing list
[email protected]
To unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/jetty-users