Accounts.xml stores passwords in plain text.

Mark Doliner mark at
Tue Dec 18 01:38:38 EST 2007

On Mon, 17 Dec 2007 22:34:08 -0600, Gary Kramlich wrote
> Mark Doliner wrote:
> > I think we made a few releases where ICQ was using the same MD5 algorithm used
> > by AIM, and it worked for maybe 99% of the people.  But it failed for the
> > remainder of the people, while the older XOR method worked.  So we switched
> > back.  We could try it again if people want.
> > 
> > -Mark
> Can't we just make this an account option?

That's certainly possible.  It's not really something users should have to
deal with, though.  I'd rather just try md5 and if that fails then fall back
to XOR.


More information about the Devel mailing list