3 ms·
Is there a good article or breakdown on modern best security practices? I am a relatively experienced programmer and know what a hash and salt are, and have rea
by MOARDONGZPLZ 10y ago
Is there a good article or breakdown on modern best security practices? I am a relatively experienced programmer and know what a hash and salt are, and have read the wikipedia article on rainbow tables (though I now forget what they are other than that they make attacks of certain things easier), but that's the extent of my knowledge.
- CiPHPerCoder 10y agoHere's one. Title: How to safely store your users' passwords in 2016. https://paragonie.com/blog/2016/02/how-safely-store-password-in-2016 https://paragonie.com/blog/2016/02/how-safely-store-password...
- jtchang 10y agoThat site recommends libsodium which by default uses Argon2. The issue is that Argon2 is not very mature yet. Also if you are using python there is no good library out there. Ideally you want something well tested since it is possible for libraries to have bugs as well.
- barsonme 10y agoThere's this good link from Thomas Ptacek: https://gist.github.com/tqbf/be58d2d39690c3b366ad https://gist.github.com/tqbf/be58d2d39690c3b366ad
- zo1 10y agoThe best one I've come across is actually an answer on the Security StackExchange. http://security.stackexchange.com/questions/211/how-to-securely-hash-passwords http://security.stackexchange.com/questions/211/how-to-secur...
- Royalaid 10y agoThe best resource I have found is https://www.owasp.org/index.php/Main_Page https://www.owasp.org/index.php/Main_Page