[Cosmo-dev] adding password retrieval to cmp

Matthew Eernisse mde at osafoundation.org
Fri Aug 18 15:42:23 PDT 2006


I see now in your original e-mail you say it's pulling encrypted 
password data. My bad.

If the patch doesn't do that, then what were the stated security 
objections? (I don't know how you're encrypting passwords, but now that 
I think about it, I should have assumed it's one-way anyhow.) I'd be 
more concerned as an end user about the unencrypted data like my e-mail 
address or other personal stuff.


Matthew

Brian Moseley wrote:
> well, that's not what the patch does :)



More information about the cosmo-dev mailing list