Re: Doubt in Security basics
Randy <[email protected]> Tue, 15 Feb 2005 08:29:14 -0800 (PST)
| Newsgroups | gmane.comp.security.programming |
|---|---|
| Message-ID | <[email protected]> |
Babu, Strings are unsuitable for storing passwords and other sensitive data because they are immutable. This means that they cannot be overwritten after being used. ~randy On Tue, 15 Feb 2005, Babu Kopparam wrote: > > > Hi! List, > > Probably i feel this doubt is related with basic knowledge. > > Whenever capturing the password, char[] is used instead of String object. What purpose does this solve. > --- I am referring to JAVA. > > Thanks in advance, > -Babu. >