Hey guys,
Simple question: is encryption mandatory as soon as you're using a custom login in production?
1) the user sends his login request and the server matches with the "crypted pass", cool, but is it enough?
2) when creating his account the user sends his username, password and e-mail in clear so I guess there's no way around it really...
Thanks
When should I use encryption?
Re: When should I use encryption?
Hi,
no it's not mandatory. The login is protected even when not using SSL encryption. You can read more about it here:
https://smartfoxserver.com/blog/login-with-encryption/
Yes, this can be an issue. Using SSL will protect all the data.
Hope it helps
no it's not mandatory. The login is protected even when not using SSL encryption. You can read more about it here:
https://smartfoxserver.com/blog/login-with-encryption/
2) when creating his account the user sends his username, password and e-mail in clear so I guess there's no way around it really...
Yes, this can be an issue. Using SSL will protect all the data.
Hope it helps
Who is online
Users browsing this forum: No registered users and 34 guests