WebApp Sec mailing list archives

Re: RE: MD5 Password encoding (was: Defeating Citi-Bank Virtual Keyboard Protection)


From: mike () sharecube com
Date: 17 Aug 2005 12:18:14 -0000


The MD5 thread has become confused. The post originally began as a virtual keyboard thread.

Cyrill and other posters have it correctly. Web forms (client side) have the challenge of being visible, having to 
retain the password even if for fleeting moment in time, and computing the MD5 hash.

My point is that MD5 on web pages is not about security and does not increase security in the least.

Thanks,
Mike


Current thread: