[Freeciv-Dev] Re: client/server authentication (PR#1767)

["Raimar Falke" <rf13@xxxxxxxxxxxxxxxxx>]

On Tue, May 27, 2003 at 09:04:09PM -0700, Mike Kaufman wrote:
> On Tue, May 27, 2003 at 01:36:56PM -0700, ChrisK@xxxxxxxx wrote:
> 
> heh, auth6q.diff at your service.
> 
> > After sending the password, there is a delay of 1-2 seconds before it get
> > accepted (local). Is this necessary?
> 
> yes. unless we set a delay for the first request, password cracking is
> fast. local users shouldn't worry about it since they won't be using auth.
> (thx for testing anyway).

I didn't test the patch yet but this sounds wrong. There shouldn't be
a timeout for a good password.

        Raimar

-- 
 email: rf13@xxxxxxxxxxxxxxxxx
 "Premature optimization is the root of all evil."
    -- D. E. Knuth in "Structured Programming with go to Statements"