This post originated from an RSS feed registered with Ruby Buzz by Michael Granger. Original Post: Cleartext Login Considered Harmful Feed Title: devEiate Feed URL: http://deveiate.org/feed/rss/blog Feed Description: A blog about Ruby, codecraft, testing, linguistics, and stuff. Mostly stuff. Latest Ruby Buzz Posts Latest Ruby Buzz Posts by Michael Granger Latest Posts From devEiate

I’ve been on the road for work for the past week, and have logged in to the admin part of my site over unencrypted links, which is something I hate doing. I should really just configure an SSL vhost for my site to eliminate this problem, but what I’d rather do is add challenge-response authentication to Typo. Or maybe it belongs in a Rails login generator. No more cleartext passwords, even over regular HTTP.

Not that I need another project, really, but I can likely use quite a lot of the OpenSource LiveJournal auth mechanism, and it’d be pretty useful, I’d think. One more for the TODO list.