27 Feb
2003
27 Feb
'03
9:23 a.m.
On Thursday, February 27, 2003, at 02:33 AM, M.-A. Lemburg wrote:
The hash idea sounds interesting, but how do you manage to convert the hash back to an email address ?
you don't. Since I use a one-way hash (for various security reasons), you store the hash in the record with the email address, and then compare hashes. same general concept as an encrypted password.
One reason you do that is so that people can't script your CGIs to extract your subscription list programmatically, since the hash gives them no hook to hack your cgis with.
-- Chuq Von Rospach, Architech chuqui@plaidworks.com -- http://www.plaidworks.com/chuqui/blog/
Stress is when you wake up screaming and you realize you haven't fallen asleep yet.