Changes between Initial Version and Version 1 of Ticket #1461, comment 1
- Timestamp:
- 01/17/14 14:25:13 (21 months ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
Ticket #1461, comment 1
initial v1 1 I completely agree that storing passwords in plaintext or sending them out in plaintext is not acceptable. And for exactly this reason we finally changed this in version 1.2 so they are encrypted using bcrypt and when resetting a password a random token is emailed to the user.1 I completely agree that storing passwords in plaintext or sending them out in plaintext is not acceptable. And for exactly this reason we finally changed this in version 1.2 (#205) so they are encrypted using bcrypt and when resetting a password a random token is emailed to the user.