Add the note about installing waveto's node-crypto for Decipher/Cipher functionality before it's natively supported

1 files changed, 11 insertions, 0 deletions

diff --git a/README.md b/README.md
index f2d4b10f9..721d91e78 100644
--- a/README.md
+++ b/README.md
@@ -14,3 +14,14 @@ That will use npm to install itself, like
 [Ouroboros](http://en.wikipedia.org/wiki/Ouroboros).
 
 Then do `man npm` or `npm help` for more information.
+
+## A note about password security
+
+In order to publish your packages, you must have your auth info
+saved into your .npmrc file.  If Cipher and Decipher are supported
+in the "crypto" module, then npm will use them.  However, as of
+node 0.1.92, these functions aren't integrated yet.
+
+You can get around this by doing:
+
+    npm install http://github.com/waveto/node-crypto/tarball/v0.0.5