June 5, 1998
6:38 p.m.
"JV" == John Viega <viega@list.org> writes:
JV> To that end, I've put in provisions for passwords to use md5
JV> if crypt is not found. BTW, do you guys think md5 should be
JV> the default, and crypt an option for those who add it to their
JV> config? The only real advantage of crypt is that it is less
JV> space intensive. Also, the way I have things set up at the
JV> moment, if someone starts w/ the default distribution and
JV> later recompiles Python to include crypt, all the old
JV> passwords won't work, since they'll be in the md5 digest
JV> format.For the reason you state, and since md5 is generally compiled in by default and crypt may not be, I'd say just go with md5 all the time. Space shouldn't be an issue really.
-Barry