So in the past I have written my own encryption using algorithms like SHA-1 and I have some questions.
If you configure your authentication provider in the web config, do you not need to pass a salt value or anything to the database to get the user's password returned to you unencrypted?
For example, I create the database from the ASP.NET 2.0 MEmbership module and I create a few users through the utility included. Then I have another site that needs to have a login page and I want to authenticate against the users that are already in my membership database, how to I do this. I have looked at the data and it is encrypted for the password and salt value.
Can someone provide some insight?
-Brian
...
Go to the complete details ...