[geeklog-devel] Atom publishing

[Vincent Furia]

Why encrypt the web services password at all?  There is a good chance, if an
attacker has access to your database he has access to your filesystem (and
the encryption key).  Additionally, what a person can do from a third party
web site should be limited for security reasons anyway.

-Vinny

On Thu, May 29, 2008 at 3:19 PM, Tony Bibbs <tony at tonybibbs.com> wrote:


> Dunno, pick a place.  a .txt file on the file system?!?  In that case the

> system would want to ensure the .txt file is locked down permission-wise.

>

> I think your point is where ever we store it we'd better lock it down best

> as we can.  Couldn't agree more.

>

> --Tony

>

> ----- Original Message ----

> From: Joe Mucchiello <joe at ThrowingDice.com>

> To: Geeklog Development <geeklog-devel at lists.geeklog.net>

> Sent: Thursday, May 29, 2008 3:37:24 PM

> Subject: Re: [geeklog-devel] Atom publishing

>

> Where do you store the cipher key?

>

> At 04:09 PM 5/29/2008, Tony Bibbs wrote:

> >That said, my original question is still valid.  If we stored a

> >password encrypted some 2-way cipher in the DB you could

>

> ----

> Joe Mucchiello

> Throwing Dice Games

> http://www.throwingdice.com

>

> _______________________________________________

> geeklog-devel mailing list

> geeklog-devel at lists.geeklog.net

> http://eight.pairlist.net/mailman/listinfo/geeklog-devel

>

>

>

> _______________________________________________

> geeklog-devel mailing list

> geeklog-devel at lists.geeklog.net

> http://eight.pairlist.net/mailman/listinfo/geeklog-devel

>

>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://eight.pairlist.net/pipermail/geeklog-devel/attachments/20080529/07102003/attachment.htm>