reger 0c754dd794 implemented DIGEST authentication, which is for remote login more secure ... as BASIC were pwd is transmitted near clear text (B64enc). This has some implication as RFC 2617 requires and recommends a password hash MD5(user:realm:pwd) for DIGEST. !!! before activating DIGEST you have to reassign all passwords !!! to allow new calculation of the hash - default authentication is still BASIC - configuration at this time only manually in (DATA/settings) or defaults/web.xml (<auth-method> - the realmname is in defaults/yacy.init adminRealm=YaCy-AdminUI - fyi: the realmname is shown on login screen - changing the realm name invalidates all passwords - but for security you are encouraged to do so (as localhostadmin) - implemented to support both, old hashes for BASIC and new hashes for BASIC and DIGEST - to differentiate old / new hash the in Jetty used hash-prefix "MD5:" is used for new pwd-hashes ( "MD5:hash" )		2014-01-17 00:02:23 +01:00
..
cider
contentcontrol	use configured admin-username for api calls	2014-01-07 21:26:50 +01:00
cora	when scaling the number of remote peers, also consider the machine load	2014-01-16 17:34:26 +01:00
crawler	spend CrawlQueues a fremem routine	2014-01-10 10:24:33 +01:00
data	implemented DIGEST authentication, which is for remote login more secure	2014-01-17 00:02:23 +01:00
document	use configured admin-username for api calls	2014-01-07 21:26:50 +01:00
gui	set more logger to 'final static'	2013-11-13 06:18:48 +01:00
http	implemented DIGEST authentication, which is for remote login more secure	2014-01-17 00:02:23 +01:00
interaction	removed unused anomichttpd code after migration to jetty	2013-12-23 01:23:40 +01:00
kelondro	better logging in logger	2014-01-16 13:08:39 +01:00
peers	when scaling the number of remote peers, also consider the machine load	2014-01-16 17:34:26 +01:00
repository	add to blacklist button in CrawlResults	2014-01-01 11:01:22 +01:00
search	implemented DIGEST authentication, which is for remote login more secure	2014-01-17 00:02:23 +01:00
server	fix NPE in TemplateEngine	2014-01-10 18:11:32 +01:00
upnp
utils	use configured admin-username for api calls	2014-01-07 21:26:50 +01:00
visualization	logger should be static	2013-11-13 06:04:28 +01:00
dbtest.java	- the webgraph shall store all links which appear on a web page and not	2013-09-15 00:30:23 +02:00
migration.java	refactoring (usage of constant names for attributes of authentication	2014-01-05 04:23:44 +01:00
yacy.java	fix: NPE on shutdown via script	2014-01-07 22:44:24 +01:00
YaCySearchClient.java