5 Dec
2014
5 Dec
'14
1:24 p.m.
Hello,
I am wondering which variant is more secure for user authentication and password scheme. Basically I am looking at both variants:
- MD5-CRYPT password scheme storage with CRAM-MD5 auth mechanism
- SHA512-CRYPT password scheme storage with PLAIN auth mechanism
In my opinion the option 2) should be safer although it is using PLAIN auth mechanism. Of course I would always use STARTTLS and not allow unencrypted connection.
What is your opinion?
Best, ML