password encryption

[John Carlson <jo...@iwesttech.com>]

I'm looking for some clarification on the wiki about Validating
PasswordTextfield:

 

http://cwiki.apache.org/WICKET/validating-passwordtextfield.html

 

" getValue() will get you an encryption of the entered value "

 

I assume this is saying wicket implements some sort of encryption
between the client and server when a user inputs a password and then
when it reaches the server it is decrypted and accessable as clear text
via " getModelObjectAsString ()".  Is this correct?  Or does the
PasswordTextfield travel to the server from the client and then get
encrypted.  Second option doesn't make sense in my head but I figured
I'd toss it out there...

 

Thanks in Advance

 

John 

 

Re: password encryption

[Igor Vaynberg <ig...@gmail.com>]

i have recently disabled encryption because the idea was flawed. it would
need to be encrypted on clientside in order to work properly.

-igor


On 8/17/07, John Carlson <jo...@iwesttech.com> wrote:
>
> I'm looking for some clarification on the wiki about Validating
> PasswordTextfield:
>
>
>
> http://cwiki.apache.org/WICKET/validating-passwordtextfield.html
>
>
>
> " getValue() will get you an encryption of the entered value "
>
>
>
> I assume this is saying wicket implements some sort of encryption
> between the client and server when a user inputs a password and then
> when it reaches the server it is decrypted and accessable as clear text
> via " getModelObjectAsString ()".  Is this correct?  Or does the
> PasswordTextfield travel to the server from the client and then get
> encrypted.  Second option doesn't make sense in my head but I figured
> I'd toss it out there...
>
>
>
> Thanks in Advance
>
>
>
> John
>
>
>
>