Apache: use bcrypt

[Tom]

Hello,

man muss ja manchmal nur erst auf die Idee kommen zu suchen, dann finden und lesen:

http://httpd.apache.org/docs/current/programs/htpasswd.html

  
-m  
    Use MD5 encryption for passwords. This is the default (since version 2.2.18).  
-B  
    Use bcrypt encryption for passwords. This is currently considered to be very secure.  
-C  
    This flag is only allowed in combination with -B (bcrypt encryption). It sets the computing time used for the bcrypt algorithm (higher is more secure but slower, default: 5, valid: 4 to 31).  
-d  
    Use crypt() encryption for passwords. This is not supported by the httpd server on Windows and Netware. This algorithm limits the password length to 8 characters. This algorithm is insecure by today's standards. It used to be the default algorithm until version 2.2.17.  

Liebe Grüße aus dem schönen Oberharz

Tom vom Berg