[Zope-DB] Plaintext Password Concerns

David A. Riggs lukewarm@ultrasoul.com
15 May 2003 16:00:41 -0400


--=-BWf5QtvJycaB+GXHk7r3
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Our University would like to give out Zope accounts for
groups of students so they may experiment and work on
various projects. One key feature that people would like
to use is connectivity to a PostgreSQL database.

We take security very seriously and would like some way
around storing plaintext passwords in the connection
strings for the Psycopg Database Connectors. Has anyone
come up with some alternative to this or a solution to
this possible security hazard?


David A. Riggs
lukewarm@ultrasoul.com
West Virginia University CS/EE


--=-BWf5QtvJycaB+GXHk7r3
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQA+w/HocGIkA/Ca6VkRAleGAJsFripI5Tn8loHMraylowYn2c2gTQCbBvT1
rR3DE0mQiNN0als/T0XGjPw=
=fIJg
-----END PGP SIGNATURE-----

--=-BWf5QtvJycaB+GXHk7r3--