X-Git-Url: http://git.shadowcat.co.uk/gitweb/gitweb.cgi?p=catagits%2FCatalyst-Manual.git;a=blobdiff_plain;f=lib%2FCatalyst%2FManual%2FTutorial%2FAuthentication.pod;fp=lib%2FCatalyst%2FManual%2FTutorial%2FAuthentication.pod;h=04106439870e7081c284e2b91648d7a5ce7eff2a;hp=26faef392f1a8638e13659eaa45224730fdf7b2b;hb=b0eca006a93b36b6b1a7c83f2ff5508ce618f3e2;hpb=bd8307d21f800e128c712686dbd90052fa28ed13 diff --git a/lib/Catalyst/Manual/Tutorial/Authentication.pod b/lib/Catalyst/Manual/Tutorial/Authentication.pod index 26faef3..0410643 100644 --- a/lib/Catalyst/Manual/Tutorial/Authentication.pod +++ b/lib/Catalyst/Manual/Tutorial/Authentication.pod @@ -633,7 +633,9 @@ using a SHA-1 hash. If you are concerned about cleartext passwords between the browser and your application, consider using SSL/TLS, made easy with the Catalyst plugin Catalyst::Plugin:RequireSSL. You should also consider adding a "salt" mechanism to your hashed passwords to -mitigate the risk of a "rainbow table" crack against your passwords. +mitigate the risk of a "rainbow table" crack against your passwords (see +L +for more information on using a salt value). =head2 Get a SHA-1 Hash for the Password