LoginMD5.pm (Perl/CGI - Javascript User Authentication)

[email protected] ("Alan Raetz") Sat, 24 Aug 2002 21:12:32 -0700
Newsgroups perl.crypto
Message-ID <024c01c24bed$a3584a80$c372fea9@compaq>
Hi,

I created a module for Perl/CGI script user authentication that uses MD5 encryption 
on both the client browser (using Javascript) and on the server (using Digest::MD5) and 
I wanted to solicit comments and get any feedback from the group.

http://perl-md5-login.sourceforge.net/

http://sourceforge.net/projects/perl-md5-login/

I'm definitely not a security expert, this was just something I needed for my own
project that I decided to make open-source, it seemed like something other
people could use... 

The additional feature that I have working but haven't released is tying the cookie
to the IP address; a user can move around, but each session is tied to the cookie hash.
But I know this is just an environment variable that can also be hacked...

One thing I'm wondering if is if this could possibly be a candidate for CPAN...

comments?

-alan