Re: [jetty-users] Question regd jetty ssl configuration.

[John English <john.foreign@xxxxxxxxx>]

On 15/07/2021 18:27, Joakim Erdfelt wrote:
> The `MD5:` format Credential / Password is what's known as a 1-way hash 
> (this is not encryption)
> You can take a password and generate a MD5.
> Then later, when a password is provided, you can run the hash again and 
> compare the resulting MD5 to know if the password that was provided is a 
> match.

Ouch. MD5? Not terribly secure. I prefer BCrypt.

--
John English