AS7 Password Encryption / Obfuscation

[dlofthouse]

For AS7 are there any plans to be updating the mechanisms we provide for encrypting / obfuscating passwords?

For previous AS releases I have seen issues regarding the fact that there are many locations that passwords are used but only some that allow for en encrypted form and at the same time other issues regarding having a single login module that contains everything required to decrypt the password.

I have also seen requests along the lines of a preference to have a service that you can call to ask "give me the password to do x" or "give me the password to do y" rather than the current approach of calling a pre-defined domain to return a single password.

[anil.saldhana]

Darran, please look at the inventory I created. We have it listed there.  We may have a thread for this already.

[dlofthouse]

Thanks, yes I see it linked to the thread also covering the handling of keystores, trustsotres and secure socket factories.

[anil.saldhana]

Design/Strategies:  http://community.jboss.org/wiki/JBossAS7PasswordMaskingAndEncryption