diff options
| author | Paul McMillan <Paul@McMillan.ws> | 2013-09-19 12:17:56 -0700 |
|---|---|---|
| committer | Paul McMillan <Paul@McMillan.ws> | 2013-09-19 12:17:56 -0700 |
| commit | f8f47718abb4c93ef00f93dde42101a8dd17a700 (patch) | |
| tree | 8938c7389695e005572c7ffc6508c4759d529a71 /docs/internals | |
| parent | 2c5c422d3446a0464eac403ad14fa0ad10c891f0 (diff) | |
| parent | a075e2ad0dcce65cb5cf4cb654ac8a6839db0baf (diff) | |
Merge pull request #1644 from PaulMcMillan/bump_hash_iterations
Increase default PBKDF2 iterations
Diffstat (limited to 'docs/internals')
| -rw-r--r-- | docs/internals/howto-release-django.txt | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/docs/internals/howto-release-django.txt b/docs/internals/howto-release-django.txt index a926de27ab..03b543bd5e 100644 --- a/docs/internals/howto-release-django.txt +++ b/docs/internals/howto-release-django.txt @@ -89,6 +89,13 @@ any time leading up to the actual release: key you'll use for the release, and should include patches for each issue being fixed. +#. If this is a major release, make sure the tests pass, then increase + the default PBKDF2 iterations in + ``django.contrib.auth.hashers.PBKDF2PasswordHasher`` by about 10% + (pick a round number). Run the tests, and update the 3 failing + hasher tests with the new values. Make sure this gets noted in the + release notes (see release notes on 1.6 for an example). + #. As the release approaches, watch Trac to make sure no release blockers are left for the upcoming release. |