ell, I did mention that I would put up a blog post indicating the recent changes.
For those who have not noticed, logging into the game has changed.
The new process is as follows:
- log on
- enter game
- play game
- quit game
- log off
I am very happy with the change. No longer is the security part something that I cooked up myself, but instead we're using the Glassfish security realms.
It is no longer required to play the game, when you log on. But once you have logged on, playing the game is as simple as the press of a button.
Also, as you now see there is some content in the "Settings" page. This page will be expanded with the possibility to edit your charactersheet and/or guild etc. So, though it seems very empty for now, this will change.
A small but important note on security
I use SHA-1 hash to encrypt passwords. I've decided to move over to SHA-512 hash as being more secure. As I don't know peoples passwords, I've rigged the software to re-encrypt the password when somebody logs in.
It does mean that it is very important for you to logon at least once with each one of your characters.
Once the change becomes permanent, your characters with the old encrypted passwords will become inaccessible without deputy intervention.