Permalink
Browse files

Prefer salted MD5 instead of bcrypt

While Wesnoth 1.14 is slated to receive support for bcrypt in the
upcoming weeks, it's not feasible at this point to update 1.12 clients
with the required code, so we'll just have to keep using salted MD5 for
a while until 1.12's player base is sufficiently small at some point
after 1.14.0 is released. Once we switch to the upstream default of
bcrypt, all old clients will become permanently unable to log into the
MP server, so this is a rather crucial tradeoff in the interest of
backwards compatibility.

See wesnoth/wesnoth#1761 for additional information.
  • Loading branch information...
shikadiqueen committed Feb 17, 2018
1 parent 460a48d commit ead65af2d4c99aab76d5a7e31b2fd1e3f089aa46
Showing with 1 addition and 1 deletion.
  1. +1 −1 config/default/container/parameters.yml
@@ -14,7 +14,7 @@ parameters:
# List of default password driver types
passwords.algorithms:
- passwords.driver.salted_md5
- passwords.driver.bcrypt_2y
- passwords.driver.bcrypt
- passwords.driver.salted_md5
- passwords.driver.phpass

0 comments on commit ead65af

Please sign in to comment.