Zulip 服务器和 Web 应用程序。开源团队聊天可帮助团队保持高效和专注。

Keegan McAllister 08345098db Use truncated Base32 SHA256 instead of hex MD5 for usernames ... There isn't a specific problem with using MD5 here, but there's just no reason to use a hash function with serious known flaws. We have to truncate to 30 characters for Django's username field. Using Base32 instead of hex gives us twice as many bits. This reduces the chances of a collision (which are pretty low already) and also provides resistance against a targetted attack based on some weakness in SHA256. (There are better ways to reduce a hash to fewer bits but let's not get too fancy.) We still need to use MD5 for Gravatar because that's their protocol. (imported from commit ffe6955312f580676409d4f9c4ed2d7f3d0df62c)		2012-09-21 13:44:13 -04:00
humbug	Rename MD5_SALT to HASH_SALT	2012-09-21 13:44:09 -04:00
servers	Move our server configuration into puppet.	2012-09-20 17:00:24 -04:00
templates	Fix display of email address.	2012-09-21 11:33:56 -04:00
tools	post-receive: Do deployments over ssh to app.humbughq.com.	2012-09-17 11:47:20 -04:00
zephyr	Use truncated Base32 SHA256 instead of hex MD5 for usernames	2012-09-21 13:44:13 -04:00
.gitignore	Add tilde files to gitignore.	2012-09-18 11:53:07 -04:00
manage.py	Add manage.py (oops).	2012-08-28 12:45:35 -04:00