From 8e0e1806a47e6fa78f884666b55c04edf11fd66c Mon Sep 17 00:00:00 2001 From: Sadie Powell Date: Fri, 11 Sep 2020 15:45:26 +0100 Subject: Require a secure password hashing algorithm for new accounts. Insecure algorithms can still be used for existing accounts. --- data/example.conf | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) (limited to 'data') diff --git a/data/example.conf b/data/example.conf index da50fe166..6704e4d72 100644 --- a/data/example.conf +++ b/data/example.conf @@ -1241,14 +1241,13 @@ module #module { name = "enc_bcrypt" } module { name = "enc_sha256" } -/* - * When using enc_none, passwords will be stored without encryption. This isn't secure - * therefore it is not recommended. - */ -#module { name = "enc_none" } - -/* Deprecated encryption modules */ + /* + * [DEPRECATED] Deprecated encryption modules. You can only use these for compatibility with + * old databases and will need to load one of the above modules as your primary encryption + * module. + */ #module { name = "enc_md5" } +#module { name = "enc_none" } #module { name = "enc_sha1" } /* -- cgit