Keeping users passwords in your database is a part of almost every application, yet securing passwords is rarely being done correctly. I recently read an article by Coda Hale about the ineffectiveness of password salts. Coda Suggested using bcrypt to store passwords. He reasoned his argument by explaining bcrypt is extremely slow to compute, therefore making it slow to hack. I completely agree, however, I wanted to add another way of safely storing passwords in a more conventional way by hiding the s...
|
4
Shouts |
|
|||
No comments yet, be the first one to post comment.