Skip to content

Weak password because of poor encryption of crypt function #65

@sse450

Description

@sse450

Tekki wrote: "By the way, the idea of using long passwords doesn't improve the security as long as we don't change the password encryption. The crypt function only considers the first 8 characters of the password and discards the rest. This means from character 9 onward you can type whatever you want. We should change this as soon as possible."

Thank you pointing at this issue. I think it is better to keep it as an open issue here. This is important especially for the SL instances open to the internet.

We would appreciate if you change password hashing to a stronger one whenever you have time.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions