[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: RFR: package mozilla-pwdhash description



On Fri, Jun 05, 2009 at 02:33:32PM +0100, Justin B Rye wrote:
> Jonathan Wiltshire wrote:
> > + Description: per-site password generator for Iceweasel and Iceape
>                                                            ^^^^^^^^^^
> Iceape only exists in Etch.

In fact now I think about it, either the package name should be
iceweasel-pwdhash (or similar) or this should say 'for Mozilla browsers'.

>    PwdHash does not encrypt passwords, but it makes brute-force attacks much
>    less effective. It also means phishing sites can only steal a hash that's
>    specific to the spoof page and useless on the site being imitated.

Agreed, looks neater.


-- 
Jonathan Wiltshire

PGP/GPG: 0xDB800B52 / 4216 F01F DCA9 21AC F3D3  A903 CA6B EA3E DB80 0B52

Attachment: signature.asc
Description: Digital signature


Reply to: