I'm awared that the passwordFormat attribute in the config, but this seems to dictate how the password is being stored into the db.
what I want to achieve is to encrypt the password using asymetric encryption (so only public key is exposed).
but when storing into db, we will stored as hashed data (don't mind use custom code to do this).
is it possible to do this? at least to workout the asymetric encryption on the password transmitted via channel.
We don't intend to implement SSL at this time, as it will affect the user experience.
...
Go to the complete details ...