RE: Security WAS RE: [HACKERS] Updated TODO list

I know that you can do both.  It seemed from previous postings, however,
that there was an issue about the urgency of each, if they are actually
separate issues.  I would have thought that the two are linked, and would be
solved as such.

MikeA


>> I have no idea where this misconception came from, but it's 
>> just plain
>> incorrect. You can do both - store hashes instead of 
>> plaintext passwords and
>> send logins securely over the network. Yes, the current 
>> authentication
>> scheme does not allow for it. But it just means that the 
>> scheme is outdated.
>> There are plenty of good secure solutions. It's just a 
>> matter of choosing
>> one.
>> 
>> Gene Sokolov.
>>