Question and Answer Enrolment Data Storage

Question

Hi All,

I see that Adaxes uses a local SQLite database for logging. However when a user enrols for password resets using a question and answer based authentication, where is this data stored and how is or can it be protected?

All of this data is obviously personal data, some more sensitive than others so I was just wondering how it is handled?

Thanks,

Answer 1

Hello!

For security considerations, answers to security questions are not stored explicitly, only hash codes of the answers are stored in AD LDS which is used as Adaxes backend. The information is secured by means of AD LDS itself.