If you value the privacy of your websites users, then please consider using a one-way encryption algorithm instead of the Wicket provided ICrypt implementations. The intention of these encryption facilities is to keep passwords private when stored in cookies or in the session.The implementation of the encryption algorithm may change between releases. As such, this interface and its implementations are not intended and should not be used as an encryption facility for persistent values.
As of Wicket 1.2 the methods encrypt and decrypt are deprecated. Consider changing your persistent encryption strategy to be based on a one-way encryption such as a SHA1 hash, not depending on Wicket classes. @author Juergen Donnerstag
| |