|
PA-DSS requires that user passwords are stored using strong encryption (MD5 is not strong)
|
This has been implemented in AudienceView 6.8.6.
The user password encryption method has been upgraded from MD5 to PBKDF2 (PBKDF2/HMAC/SHA-256). This greatly increases the level of encryption available for stored passwords. For upgrading clients, existing passwords are maintained as-is in MD5, usable for log-in until updated or reset. New, updated and reset passwords will use the stronger PBKDF2 encryption. |
AVD-6069 |