summaryrefslogtreecommitdiff
path: root/doc/security
diff options
context:
space:
mode:
authorJoey Hess2014-12-15 11:44:55 -0400
committerJoey Hess2014-12-15 11:44:55 -0400
commita4307f85a5ba067305a77e38c656737467745a3c (patch)
tree9aa9e3c74dc0406bd5a1b52f0957322051ea71af /doc/security
parentfbf9cc6f2b66ba5e56993a239e511cc6bae4af54 (diff)
parentc164e48096c89d82dc6fedf4ef16f0b2fa69fc1b (diff)
Merge branch 'master' of ssh://propellor.branchable.com
Diffstat (limited to 'doc/security')
-rw-r--r--doc/security/comment_7_ebbb6f3617c879715a35900a07ea1909._comment8
1 files changed, 8 insertions, 0 deletions
diff --git a/doc/security/comment_7_ebbb6f3617c879715a35900a07ea1909._comment b/doc/security/comment_7_ebbb6f3617c879715a35900a07ea1909._comment
new file mode 100644
index 00000000..e9d20642
--- /dev/null
+++ b/doc/security/comment_7_ebbb6f3617c879715a35900a07ea1909._comment
@@ -0,0 +1,8 @@
+[[!comment format=mdwn
+ username="https://www.google.com/accounts/o8/id?id=AItOawkgUir7k_amh9RFp4D3QutX1fGh_nd7ko4"
+ nickname="Philipp"
+ subject="Passwords in PrivData"
+ date="2014-12-13T18:25:23Z"
+ content="""
+I wonder if there could be a shortcut in PrivData handling that hashes the input with crypt() instead of passing it raw to a machine. For instance passwords are stored in plain on the target machines, while this is not required to set the password in shadow: the hash would suffice. I think this page should at least spell out that fact.
+"""]]