Subj : src/sbbs3/useredit.cpp
To   : Digital Man
From : deon
Date : Mon Feb 27 2023 20:08:02

  Re: src/sbbs3/useredit.cpp
  By: Digital Man to deon on Sun Feb 26 2023 09:32 pm

 >  >  > in memory as some point during the authentiation process(es). So we'd
 >  >  > have to have a way to decrypt an encrypted password (i.e. stored in
 >  >  > user.tab file). Which means you'd have to have a private key stored
 >  >  > somewhere. Is that private key store secure? If it's just a file in
 >  >  > the sbbs directory tree, its no more secure than the user.tab file.
 >  >  > You see where this is going?
 >
 >  > Why is it needed to decrypt it?

 > I'm not sure I understand your question. Why is a key needed to decrypt a
 > password? Because that's how reversable encryption works. <shrug>

So you said "We'd have to have a way to decrypt an encrypted password".

My question, is why do you need to decrypt it?

This message is in the context that somebody asked if you had plans to encrypt user's passwords.



....лоеп

---
 ю Synchronet ю AnsiTEX bringing back videotex but with ANSI
 * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

.