Mailing-List: contact modules-dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: modules-dev@httpd.apache.org
Received-SPF: pass (herse.apache.org: domain of jonesf11@gmail.com designates
 66.249.92.169 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=c1lYkd1iGyr4Ni46juEfIdiGt6WwkittC56KoNyb6RA6Ny9HbBiNZk+dRnQxL8Aqv0GLCWdniqLk8xlPmzZi44mQLEq9vVePwLKrYcpFcMh6JD6VP7NCJ/7Mrw+8EPt9AF6pJID1DXG6gq6JY3HAMH5IDKMUDBom9QtEh5t6m/c=
Message-ID: <ef20daa00706090709v1a329ab8m9945b3d684993e5@mail.gmail.com>
Date: Sat, 9 Jun 2007 09:09:22 -0500
From: "Frank Jones" <jonesf11@gmail.com>
To: modules-dev@httpd.apache.org
Subject: Re: Patch for mod_authn_dbd plaintext auth
In-Reply-To: <200706090739.12004.markc@renta.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <200706090542.07140.markc@renta.net>
	 <20070609073212.34a71807@grimnir> <200706090739.12004.markc@renta.net>

On 6/9/07, Mark Constable <markc@renta.net> wrote:
> I personally think it's a valid option to provide and I lean
> towards thinking it only applies to the DBD level. A crypted
> (or better) password hash in a plain text .htaccess is a good
> idea but a database is already a binary blob so both would
> prevent trivial accidental viewing of passwords.

This isn't directly relevant to your question, but I think it's
important to point out that while sqlite databases are binary, they
aren't really blobs. Try running "strings" on a sqlite database and
you'll see what I mean.