Re: [Phpgroupware-developers] MD5 authentification

[Guillaume Courtois]

Chris Weiss (address@hidden) wrote*:


>


>>base64(md5(           username:passwd    :nonce))


>>base64(md5(base64(md5(username:password)):nonce))


>


>well, at least then when syncing is setup on the phpgw side you could store md5


>(username:password) in the db.  You pass the username in the first request so 
>you's


>be able to keep that over in the session and then compair on the database.  A


>little more usable but still quite strange.




Yes but that means that in the db there will be a field with md5(password) in 
the
phpGW standard tables, and a field with md5(username:passwd) in the 
syncml-server
tables ... That makes people deal with two usernames/passwords, and I don't 
like it
...