Accounts.xml stores passwords in plain text.

Ankit Singla anksingla at gmail.com
Tue Dec 18 01:58:31 EST 2007


Mark Doliner wrote:
> On Mon, 17 Dec 2007 22:34:08 -0600, Gary Kramlich wrote
>   
>> Mark Doliner wrote:
>>     
>>> I think we made a few releases where ICQ was using the same MD5 algorithm used
>>> by AIM, and it worked for maybe 99% of the people.  But it failed for the
>>> remainder of the people, while the older XOR method worked.  So we switched
>>> back.  We could try it again if people want.
>>>
>>> -Mark
>>>       
>> Can't we just make this an account option?
>>     
>
> That's certainly possible.  It's not really something users should have to
> deal with, though.  I'd rather just try md5 and if that fails then fall back
> to XOR.
>
> -Mark
>
> _______________________________________________
> Devel mailing list
> Devel at pidgin.im
> http://pidgin.im/cgi-bin/mailman/listinfo/devel
>   
That sounds like a good solution to me.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 2335 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://pidgin.im/pipermail/devel/attachments/20071218/d8d2f475/attachment-0002.bin>


More information about the Devel mailing list