Re: support for salted passwords

2014-02-07 Thread Ognjen Blagojevic
Chris, On 6.2.2014 15:28, Christopher Schultz wrote: 3. option 2 with salt Adding a salt would be trivial given the changes I have proposed. I'd love to enable salting by default when using a hash, but that may be surprising to some users. I suppose the salt could be separated from the salted-

Re: Re: support for salted passwords

2014-02-06 Thread Gabriel Sánchez Martínez
On 02/05/2014 05:12 PM, Christopher Schultz wrote: Gabriel, On 2/4/14, 3:29 PM, "Gabriel E. Sánchez Martínez" wrote: On 02/04/2014 12:20 PM, Christopher Schultz wrote: Nick, On 2/2/14, 2:51 AM, Nick Williams wrote: On Feb 2, 2014, at 1:23 AM, Gabriel E. Sánchez Martínez wrote: I am very ne

Re: support for salted passwords

2014-02-06 Thread Christopher Schultz
Ognjen, On 2/5/14, 6:36 AM, Ognjen Blagojevic wrote: > On 4.2.2014 21:29, "Gabriel E. Sánchez Martínez" wrote: >>> I've been tossing-around some upgrades in my mind for the realm >>> implementations that would allow for better pluggability for things like >>> this. Right now, the only way to imple

Re: support for salted passwords

2014-02-05 Thread Christopher Schultz
Gabriel, On 2/4/14, 3:29 PM, "Gabriel E. Sánchez Martínez" wrote: > > On 02/04/2014 12:20 PM, Christopher Schultz wrote: >> Nick, >> >> On 2/2/14, 2:51 AM, Nick Williams wrote: >>> On Feb 2, 2014, at 1:23 AM, Gabriel E. Sánchez Martínez wrote: I am very new to Tomcat but am already getting m

Re: support for salted passwords

2014-02-05 Thread Ognjen Blagojevic
On 4.2.2014 21:29, "Gabriel E. Sánchez Martínez" wrote: I've been tossing-around some upgrades in my mind for the realm implementations that would allow for better pluggability for things like this. Right now, the only way to implement, say, bcrypt, would be to write your own Realm. That's silly:

Re: Re: support for salted passwords

2014-02-04 Thread Gabriel E. Sánchez Martínez
On 02/04/2014 12:20 PM, Christopher Schultz wrote: Nick, On 2/2/14, 2:51 AM, Nick Williams wrote: On Feb 2, 2014, at 1:23 AM, Gabriel E. Sánchez Martínez wrote: I am very new to Tomcat but am already getting my feet wet with a web application. A requirement for this application is form-based

Re: support for salted passwords

2014-02-04 Thread Christopher Schultz
Nick, On 2/2/14, 2:51 AM, Nick Williams wrote: > On Feb 2, 2014, at 1:23 AM, Gabriel E. Sánchez Martínez wrote: >> I am very new to Tomcat but am already getting my feet wet with a >> web application. A requirement for this application is form-based >> password authentication, and I would like to

Re: Re: support for salted passwords

2014-02-02 Thread Gabriel Sánchez Martínez
On 02/02/2014 02:51 AM, Nick Williams wrote: On Feb 2, 2014, at 1:23 AM, Gabriel E. Sánchez Martínez wrote: Hi developers, I am very new to Tomcat but am already getting my feet wet with a web application. A requirement for this application is form-based password authentication, and I woul

Re: support for salted passwords

2014-02-01 Thread Nick Williams
On Feb 2, 2014, at 1:23 AM, Gabriel E. Sánchez Martínez wrote: > Hi developers, > > I am very new to Tomcat but am already getting my feet wet with a web > application. A requirement for this application is form-based password > authentication, and I would like to store passwords in a databas