<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> </head> <body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 16px; font-family: Calibri, sans-serif; "> <div>After the feedback from the DB-WG Meeting in Vienna last week, I'd like to bring this back to the list.</div> <div><br> </div> <div>I'd like to see auth: MD5-PW deprecated , even though it seems to be widely used (for various reasons)</div> <div>according to the report by DB presented to us. </div> <div><br> </div> <div>Until we can stop it being used completely, I'd like the hashes removed from the database, since they are sitting out there</div> <div>waiting to be bruteforced, at which point somebody takes malicious control of the resources protected by your mntner.</div> <div><br> </div> <div>I understand the challenge of hiding the field from display is that it must be present when changing or deleting objects , but</div> <div>since it only appears to be in mntners, I'm sure an exception could be made, considering the seriousness of this.</div> <div><br> </div> <div>Dave.</div> <div><br> </div> </body> </html>