| |||||||||||||
A hole in crypt_blowfishA hole in crypt_blowfishPosted Jun 22, 2011 22:44 UTC (Wed) by jzbiciak (✭ supporter ✭, #5246)In reply to: A hole in crypt_blowfish by iabervon Parent article: A hole in crypt_blowfish
Ah, gotcha. You're not trying to gracefully grandfather in those whose passwords are affected. Rather, you're simply forcing their passwords to be invalid once you have the corrected library.
That leaves the process of "how do you securely reset the affected users' passwords" as an exercise to be solved by the reader. ;-)
(Log in to post comments)
|
|||||||||||||