>You're clearly somebody who wants to rely on "rules of thumb" for security. I'm arguing against the entire concept of rules of thumb Not all devs are security

>You're clearly somebody who wants to rely on "rules of thumb" for security. I'm arguing against the entire concept of rules of thumb Not all devs are security experts, or can even afford to focus on security. To deny the value of rules of thumb is to deny that they need to consider security. > Did I ever say "MD5 is ok in some cases"? Oh, really? Were you not arguing that MD5 is ok if you only need preimage resistance? > MD5 is not broken for the usage that you think it's broken for. Please don't snipe on things like this again. People like you who say things like "md5 is always bad" or "you should bcrypt, duh" are literally cargo culting the idea of computer security. Hmm. Seems like you were...