Encrypting Login Credentials

Moderator: crythias

Locked
srivatsatatti
Znuny newbie
Posts: 85
Joined: 25 Jan 2011, 06:54
Znuny Version: OTRS 3
Company: eStomi Technologies Pvt Ltd
Contact:

Encrypting Login Credentials

Post by srivatsatatti »

Due to some security issues, we want to Encrypt the Login (Both Agent and Customer) credentials before submitting the page.
OTRS 3.2.x, Linux Ubuntu, Mysql 5.1.
jojo
Znuny guru
Posts: 15020
Joined: 26 Jan 2007, 14:50
Znuny Version: Git Master
Contact:

Re: Encrypting Login Credentials

Post by jojo »

use https....
"Production": OTRS™ 8, OTRS™ 7, STORM powered by OTRS
"Testing": ((OTRS Community Edition)) and git Master

Never change Defaults.pm! :: Blog
Professional Services:: http://www.otrs.com :: enjoy@otrs.com
srivatsatatti
Znuny newbie
Posts: 85
Joined: 25 Jan 2011, 06:54
Znuny Version: OTRS 3
Company: eStomi Technologies Pvt Ltd
Contact:

Re: Encrypting Login Credentials

Post by srivatsatatti »

Thanks Jojo, have used https.
But the credentials can be captured from client machine's RAM.
You do not have the required permissions to view the files attached to this post.
OTRS 3.2.x, Linux Ubuntu, Mysql 5.1.
jojo
Znuny guru
Posts: 15020
Joined: 26 Jan 2007, 14:50
Znuny Version: Git Master
Contact:

Re: Encrypting Login Credentials

Post by jojo »

as the credentials are put in by agents they will be visible always for operating system etc
"Production": OTRS™ 8, OTRS™ 7, STORM powered by OTRS
"Testing": ((OTRS Community Edition)) and git Master

Never change Defaults.pm! :: Blog
Professional Services:: http://www.otrs.com :: enjoy@otrs.com
srivatsatatti
Znuny newbie
Posts: 85
Joined: 25 Jan 2011, 06:54
Znuny Version: OTRS 3
Company: eStomi Technologies Pvt Ltd
Contact:

Re: Encrypting Login Credentials

Post by srivatsatatti »

Is there any ways for encrypting it at application level??
OTRS 3.2.x, Linux Ubuntu, Mysql 5.1.
jojo
Znuny guru
Posts: 15020
Joined: 26 Jan 2007, 14:50
Znuny Version: Git Master
Contact:

Re: Encrypting Login Credentials

Post by jojo »

no
"Production": OTRS™ 8, OTRS™ 7, STORM powered by OTRS
"Testing": ((OTRS Community Edition)) and git Master

Never change Defaults.pm! :: Blog
Professional Services:: http://www.otrs.com :: enjoy@otrs.com
Locked