ChromiVNC: long auth in chromivnc
Jonathan Morton
chromi "at" chromatix.demon.co.uk
Tue Aug 13 15:20:03 2002
>I can't mail you for some reason (your MX is extremely fragile from my
>end), but here will do anyway.
Which address? Try the one in my sig.
>I'm going through and adding non-reversible SHA1 password support to
>TightVNC and I notice you already use "3" to mean "long authentication"
>in ChromiVNC 3.4.
>How widely is this used? I don't mind pulling it in so we have
>cross-compatibility, but realistically, reversible passwords are not
>best practice.
I don't know of any client-side implementations - I don't even
remember if I fully documented it. It was one of the things I had in
progress when I ran out of time to work on it. I think the
server-side code is complete and functional.
For compatibility with deployed ChromiVNC, you'd best adopt a
different number than 3, but otherwise I wouldn't worry about it if
your scheme is better. If you think it has enough merit to be
further implemented, go ahead!
--
--------------------------------------------------------------
from: Jonathan "Chromatix" Morton
mail: chromi "at" chromatix.demon.co.uk
website: http://www.chromatix.uklinux.net/
geekcode: GCS$/E dpu(!) s:- a21 C+++ UL++ P L+++ E W+ N- o? K? w--- O-- M++$
V? PS PE- Y+ PGP++ t- 5- X- R !tv b++ DI+++ D G e+ h+ r++ y+(*)
tagline: The key to knowledge is not to rely on people to teach you it.