network profile
| bio | website | |
|---|---|---|
| location | United States | |
| age | ||
| visits | member for | 8 months |
| seen | Dec 23 '12 at 15:49 | |
| stats | profile views | 2 |
|
Aug 31 |
comment |
Help understanding basic user authentication with salts and hashing I've started a session question on SO if you're familiar with that area as well: stackoverflow.com/questions/12207507/… |
|
Aug 31 |
awarded | Scholar |
|
Aug 31 |
accepted | Help understanding basic user authentication with salts and hashing |
|
Aug 30 |
comment |
Help understanding basic user authentication with salts and hashing What about sending both a user id and session id - I get the user based on the supplied user id; if the user.sessionId == incoming_session_id, then I know its the user. Is this ok? Or should I not send the user id at all, and just send the session id, and do a query on my table to get the user with incoming_session_id. I'd rather do the first approach since I don't have session_id indexed.. |
|
Aug 30 |
awarded | Editor |
|
Aug 30 |
comment |
Help understanding basic user authentication with salts and hashing Thanks for your detailed answer. I'll actually be using SSL but I just wanted to know how it would work without it to better understand the system. Can you take a look at my updated question and see what other details you can help fill in? |
|
Aug 30 |
comment |
Help understanding basic user authentication with salts and hashing Thanks for your answer. Do you think you can clear up some more confusion for me - I've updated the question with a few more details.. |
|
Aug 30 |
revised |
Help understanding basic user authentication with salts and hashing added 1164 characters in body |
|
Aug 30 |
awarded | Student |
|
Aug 30 |
comment |
Help understanding basic user authentication with salts and hashing Ya I actually read that tutorial, still didn't make sense to me the overall process. I'm starting to understand it a little better now, but now the question is what if I'm not using SSL? |
|
Aug 30 |
awarded | Supporter |
|
Aug 30 |
comment |
Help understanding basic user authentication with salts and hashing Ok makes sense. I guess the part I'm not understanding is the actual sending of the password over the air during the form submission process. Say I'm not using SSL - what then? How would I send the password to the server for authentication? |
|
Aug 30 |
asked | Help understanding basic user authentication with salts and hashing |
|
Aug 30 |
awarded | Autobiographer |
