[TYPO3-english] Salted Passwords & RSA: temp directory path

[François Suter]

Hi,

> But I can't set the RSA Extension's temporary path properly to store the
> temporary keys. I've created a folder above my public_html in the home
> directory (/home/username/rsaauth/) and chmodded it to 700 - but it
> stays empty. I can't find the keys in typo3temp neither.

But does the login work? Encrypted?

As far as I understand, the keys are created on the fly and exist only 
for a minimal amount of time. I've personally never "caught" a key file.

> * is the RSA Extension really needed for increased security?

Yes, it's better than SSL.

> * what form should the path in the EM Configuration dialogue have?

Any absolute path. If the login works, it means the configuration is ok.

> * any other hints to set this up for better security?

Seems ok like you did.

Cheers

-- 

Francois Suter
Cobweb Development Sarl - http://www.cobweb.ch