141 reputation
16
bio website
location United States
age
visits member for 2 years, 1 month
seen Mar 16 at 21:55

May
6
awarded  Notable Question
Mar
16
asked Is it safe to rely on UUIDs for privacy?
Jul
24
awarded  Popular Question
Aug
31
comment Help understanding basic user authentication with salts and hashing
I've started a session question on SO if you're familiar with that area as well: stackoverflow.com/questions/12207507/…
Aug
31
awarded  Scholar
Aug
31
accepted Help understanding basic user authentication with salts and hashing
Aug
30
comment Help understanding basic user authentication with salts and hashing
What about sending both a user id and session id - I get the user based on the supplied user id; if the user.sessionId == incoming_session_id, then I know its the user. Is this ok? Or should I not send the user id at all, and just send the session id, and do a query on my table to get the user with incoming_session_id. I'd rather do the first approach since I don't have session_id indexed..
Aug
30
awarded  Editor
Aug
30
comment Help understanding basic user authentication with salts and hashing
Thanks for your detailed answer. I'll actually be using SSL but I just wanted to know how it would work without it to better understand the system. Can you take a look at my updated question and see what other details you can help fill in?
Aug
30
comment Help understanding basic user authentication with salts and hashing
Thanks for your answer. Do you think you can clear up some more confusion for me - I've updated the question with a few more details..
Aug
30
revised Help understanding basic user authentication with salts and hashing
added 1164 characters in body
Aug
30
awarded  Student
Aug
30
comment Help understanding basic user authentication with salts and hashing
Ya I actually read that tutorial, still didn't make sense to me the overall process. I'm starting to understand it a little better now, but now the question is what if I'm not using SSL?
Aug
30
awarded  Supporter
Aug
30
comment Help understanding basic user authentication with salts and hashing
Ok makes sense. I guess the part I'm not understanding is the actual sending of the password over the air during the form submission process. Say I'm not using SSL - what then? How would I send the password to the server for authentication?
Aug
30
asked Help understanding basic user authentication with salts and hashing
Aug
30
awarded  Autobiographer