[TYPO3-project-4-3] t3sec_saltedpw as sysext?

[Michael Stucki]

Hi Masi,

> It's ok for me if folks have to change the password, but only if they
> have to do it themselves on login. Not all accounts have email addresses
> so password resetting via email is IMHO not a valid upgrade method.

t3sec_saltedpw contains a hook that converts the passwords on-the-fly 
after a user has successfully logged in.

> PS: If we can have salted hash, then md5 is obsolete.

It can still be provided as an alternative.

- michael
-- 
Use a newsreader! Check out
http://typo3.org/community/mailing-lists/use-a-news-reader/