diff -r 1b90f6c41d9c -r 1cd9e6df6f27 install/includes/payload.php --- a/install/includes/payload.php Sat Dec 12 16:45:52 2009 -0500 +++ b/install/includes/payload.php Sat Dec 12 17:30:46 2009 -0500 @@ -253,9 +253,12 @@ define('ENANO_CONSTANTS', ''); } -// The AES encryption key used to store passwords. We have a very specific -// reason for doing this; see the rationale at: +// The AES encryption key used for encrypting various bits of information, +// such as cookies, that should not be editable by users. Read about +// Enano's security model at: // http://docs.enanocms.org/Help:Appendix_B +// This key was at one point used for passwords as well, but this is no +// longer true. \$crypto_key = '$site_key'; EOF;