I noticed that MediaWiki 1.33 includes a stronger hash algorithm (argon2) yet the default password algorithm in use is still pbkdf. The manual page is not updated for this. Does anyone know how to safely convert? Is it advisable to attempt changing to this new hash algorithm?
Thanks,
Kevin
If you change the hash, it will convert peoples hashes next time they log in.
Some hash types can be converted by maintenance scripts, but that tends to only be the weaker hash wrapped in strong hash types
-- Brian
On Friday, November 29, 2019, Kevin Zhang msuzhangke8@gmail.com wrote:
I noticed that MediaWiki 1.33 includes a stronger hash algorithm (argon2) yet the default password algorithm in use is still pbkdf. The manual page is not updated for this. Does anyone know how to safely convert? Is it advisable to attempt changing to this new hash algorithm?
Thanks,
Kevin _______________________________________________ MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
mediawiki-l@lists.wikimedia.org