Re: Doubt in Security basics

Randy <[email protected]> Tue, 15 Feb 2005 08:29:14 -0800 (PST)
Newsgroups gmane.comp.security.programming
Message-ID <[email protected]>
Babu,

Strings are unsuitable for storing passwords and other sensitive data 
because they are immutable.  This means that they cannot be overwritten 
after being used.

~randy

On Tue, 15 Feb 2005, Babu Kopparam wrote:

>
>
> Hi! List,
>
> Probably i feel this doubt is related with basic knowledge.
>
> Whenever capturing the password, char[] is used instead of String object. What purpose does this solve.
>  ---  I am referring to JAVA.
>
> Thanks in advance,
> -Babu.
>