What does 'redacts password' mean?

In the InfluxDB documentation, I found the following note:

Note: InfluxDB redacts passwords when you enable authentication.

Source: https://docs.influxdata.com/influxdb/v0.13/administration/authentication_and_authorization

Author: Denis Santos, 2016-07-01

1 answers

I recommend using this link so that the user is automatically taken to the question session.

As far as I know, redacts means "censorship" or "hides" in the indicative of the present, this would be necessary if for example the database was shown publicly, or to assure users of the fact that the person with access to the database can not know his password, which could be used for malicious purposes in a scenario where the user uses services.

Would be used as the database to use a hashing password in the password that is sent by a person goes through a process in which it is to be made in the other string of characters, if the string that is formed is the same as on the website, the user is granted access to the service, this is a mechanism for an administrator to a site that doesn't know the password, but it does need to have a sense of ethics and implement the same.

A hashing process can only work from one way, with a series of fixed processes, otherwise this is an encryption process, an encryption needs to be implemented with at least two elements - usually the content to be passed and a "key".

User cantoni pointed out something important: the hashing process must be irreversible in conventional ways, otherwise there would also be the possibility that a person with access to the database would retrieve the information of the users even if the same had never been hosted on the server.

 1
Author: Krossbow, 2016-07-01 17:58:38