securely getting the user's password

Paul Rubin http
Sun Mar 9 03:51:26 EDT 2008


Chick <anh.hai.trinh at gmail.com> writes:
> So I guess it is not possible in pure Python to lock the memory from
> being swaped?

Even if you can lock the memory, python strings are immutable and can
be copied around by the runtime system at any time.  You're better off
using the C API to encapsulate the password.  If this is a high
security application, consider using a hardware token of some kind
instead.



More information about the Python-list mailing list