Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 4737

Encryption to plain text change advice

$
0
0

Hi.

I need some general advice on the best way to deal with a particular scanario.

I have a website which allows customers to create a quote request. This is essentially a shopping cart but they do not go through a payment process. During the quote creation, they must either log in (if they have previously created an account) or create a new account (if this is their first quote request). The passwords are stored using the ASP.NET default: encrypted in standard ASP.NET tables (aspnet_Membership, etc), and I use te standard ASP.NET Login and CreateUserWizard controls to handle these. Once created the quote is stored in a database. The admin team can the log in (with admin credentials (in the role of "admin") and can edit and print these quote requests. All this works well.

I now need to modify this scanrio slightly.

In the event that a customer does not want to use the website, they may call (telephone) the company selling the products. If this happens, the admin team need to create the quote request for the customer. This is not an issue if it is the first request as the admin team can create an account for the customer. BUT, it IS an issue where the customer already has an account. In this case, the admin team do NOT know the password of the customer.

What's the best way to modify the site so that, when a customer creates an account (or requests a new password via the standard ASP.NET "ForgottenPassword" dialogue), the admin team are passed the passwords? I s a simple C# email the best method?

Also, how can I handle the fact that there are now hundreds of customers in the system with encrypted passwords? Retrievable? I can change the default method to plain text instead of encrypted but what will be the effect on the existing encrypted passwords? Any?

If you needed to make this change in useability given what I have at the moment, how would you implement it?

Thanks.

 


Viewing all articles
Browse latest Browse all 4737

Latest Images

Trending Articles



Latest Images