[TYPO3-core] RFC #12430: Install Tool Password gets transmitted plain text

Dmitry Dulepov dmitry.dulepov at gmail.com
Mon Nov 2 11:09:27 CET 2009


Hi!

Bernhard Kraft wrote:
> Solution:
> Perform a challenge/response password authentication like used for the
> BE-Login form. The current rewritten install-tool login, using a custom
> session management easily allows to add such a feature.

(Not a criticism or alternative idea, just a thought) It would be cool to use the same way as we do not with login forms: use hooks to select preferable auth way. Thus we could use RSA auth for install tool too.

-- 
Dmitry Dulepov
Facebook: http://www.facebook.com/dmitryd
Twitter: http://twitter.com/dmitryd
Skype: liels_bugs


More information about the TYPO3-team-core mailing list